Wix deploys and maintains technical and organizational security measures to protect the company’s and our customers’ data and assets. The Wix security team leads the facilitation and development of pr...

Wix Security Measures Overview

Discover how Wix prioritizes your security with a dedicated team and comprehensive measures to protect your data. Learn about our compliance certifications, physical access controls, and robust incident response plans that ensure business continuity. Explore features like two-factor authentication and automatic HTTPS for your sites, as well as our commitment to employee training and third-party risk management. By understanding these security protocols, you can feel confident in using Wix to manage your online presence.

<div data-component-type="text"><div>Wix deploys and maintains technical and organizational security measures to protect the company’s and our customers’ data and assets. The Wix security team leads the facilitation and development of procedures, processes and controls that govern the security and integrity of Wix and our users.</div></div><div data-component-type="text"><div>Below is an overview of the principle measures Wix employs to keep our platform and our users secure. For further information about Wix’s information security policies for the secure and acceptable use of our platform, infrastructure and operational services, as well as Wix’s approach to security and compliance, see the <a data-composite="true" href="https://dc93fe30-005a-4335-a338-0b4584da87e2.filesusr.com/ugd/0784b1_6794e1c4f7b8483f9f29d863fdab076a.pdf" target="_blank">Wix Security Whitepaper</a>.</div></div><div data-component-type="table"><div class="table-wrapper"><table><thead><tr><th><div>Security Measure</div></th><th><div>Implementation</div></th></tr></thead><tbody><tr><td><div><strong>Wix Dedicated Security Team</strong></div></td><td><ul>
  <li>Wix employs a team of security and privacy professionals. The team maintain and constantly improves the company’s defense systems, implement security processes, build security infrastructure, and perform risk management. </li>  <li>Wix's dedicated security team also actively scan our platform and infrastructure for security threats, perform penetration tests, conduct quality assurance measures and software security reviews, and provide project-specific consulting services to Wix’s product and engineering teams.</li>  <li>The security team constantly monitor for suspicious activity, address security threats, and perform routine security assessments and audits.</li></ul></td></tr><tr><td><div><strong>Compliance and Certifications </strong></div></td><td><div>Wix is a PCI Level 1 Merchant &amp; Service Provider, is SOC2 Type 2 compliant, and is ISO 27001 certified. <a data-composite="true" href="https://support.wix.com/en/article/security-of-wixs-billing-services-and-pci-compliance" target="">View our certifications</a></div></td></tr><tr><td><div><strong>Physical Access Controls </strong></div></td><td><div><br /></div><ul>
  <li>Wix services are hosted on AWS and Google Cloud Platform cloud-based data centers, for which Equinix provides all physical colocation services. Our infrastructure providers maintain industry-standard security certifications, including: ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3 and PCI DSS Level 1.</li>  <li>Our data center locations are detailed in <a data-composite="true" href="https://www.wix.com/about/privacy" target="_blank">our privacy policy</a>.</li>  <li>More info on our Cloud Service Providers' security can be found at the<a data-composite="true" href="https://aws.amazon.com/security/" target=""> AWS security page</a> and the <a data-composite="true" href="https://cloud.google.com/security/" target="">Google Cloud security page</a>.</li>  <li>Physical security at Wix offices worldwide are protected by access control systems.</li></ul></td></tr><tr><td><div><strong>Business Continuity, Incident Response and Disaster Recovery Plans </strong></div></td><td><ul>
  <li>Wix uses data centers and cloud service providers in separate geographic locations and different time zones to allow infrastructure and service availability, as well as continuity.</li>  <li>Wix develops and maintains business continuity, incident response and disaster recovery plans, which are tested and updated periodically.</li>  <li>Wix facilitates designated solutions for protection against and mitigation of DDoS attack effects.</li>  <li>Wix keeps dedicated teams in multiple geographies to support the Wix platform, services and supporting infrastructure.</li></ul></td></tr><tr><td><div><strong>System Access Controls</strong></div></td><td><ul>
  <li>Wix maintains an access control policy that covers Wix’s internal network and systems processing personal data. This facilitates control processes, including access logging, monitoring and limitation.</li>  <li>Wix’s records and systems distinguish customer records and information from non-customer information. </li>  <li>Data insert, deletion, and modification are stamped and logged (date/time and relevant personnel). </li></ul></td></tr><tr><td><div><strong>Application Level Security, Monitoring and Risk Identification &amp; Assessment</strong></div></td><td><ul>
  <li>Wix Users can choose to establish two-factor authentication in their Wix accounts for an additional layer of security. </li>  <li>Wix Users can customize many of their website permissions (This varies, depending on the specific service and features used).</li>  <li>All of Wix cloud and public interfaces are automatically scanned for vulnerabilities and misconfigurations on a<strong> </strong>regular basis.  Wix regularly monitors, detects, and blocks incoming attacks on our platform.</li>  <li>Penetration tests are performed on our platform by Wix’s security team and an external third party on a regular basis. Results are evaluated and remediated (if needed). </li>  <li>Wix maintains a security bug bounty program, which gives independent security researchers a platform for testing and submitting vulnerability reports.</li>  <li>Wix facilitates privacy controls in its code to ensure customers’ data privacy and to prevent one customer from accessing another customer’s data.</li></ul></td></tr><tr><td><div><strong>Control and Security Measures for Storage, Transmission and Transport of Personal Data</strong></div></td><td><ul>
  <li>All new sites created on Wix have HTTPS automatically enabled as part of the basic services provided by Wix. </li>  <li>To protect user data in transit, Wix utilizes HTTPS over TLS 1.2 and above, including automatic SSL certification. </li>  <li>Our users’ data at rest encryption utilizes AES-256, the industry’s most broadly used encryption method. Within our PCI environment, we maintain the highest standard of encryption and storage measures using a FIPS 140-2-certified HSM (Hardware Security Module).</li>  <li>Wix has a multiple layer security architecture to help protect against 0-day security issues.</li>  <li>Firewalls and intrusion prevention systems are in place to prevent unauthorized access.</li>  <li>Wix facilitates a SOC 24/7/365 monitoring program focused on information gathered from various sources (internal network traffic, employee actions on systems and on-going research about vulnerabilities). </li></ul></td></tr><tr><td><div><strong>Employee Awareness and Training </strong></div></td><td><ul>
  <li>Wix’s security team communicates with all employees on a regular basis, covering topics such as emerging threats, phishing awareness campaigns, and other industry-related security topics.</li>  <li>All Wix employees:</li></ul><ol>
  <li>Undergo security training when joining the company and on an ongoing basis (as required), as well as additional role dependent training on specific aspects of security (as required).</li>  <li>Agree to the company’s code of conduct, which highlights our commitment to keep customer information safe and secure. </li>  <li>Sign a confidentiality statement at the time of hire.</li></ol></td></tr><tr><td><div><strong>Third Party Risk Management Program</strong></div></td><td><div>Prior to engaging new third-party service providers or vendors who will have access to Wix data, platform or systems, Wix conducts a risk assessment of vendors’ data security practices as part of Wix’s Third Party Risk Management Program.</div></td></tr><tr><td><div><strong>Law Enforcement Request Policy</strong></div></td><td><ul>
  <li>Wix respects the human rights of our customers and their end users.</li>  <li>As such, Wix implements a Law Enforcement Request Policy, which is designed to ensure that all data requests received from law enforcement agencies, governmental or regulatory bodies (“Authorities”) are valid and made in accordance with the applicable legal procedures.</li>  <li>Wix does not disclose personal data to authorities, unless required by applicable law, and Wix challenges unlawful requests. Unless legally prohibited from doing so, if Wix receives a demand for a customer’s Users-of-Users Information (as defined in the <a data-composite="true" href="https://www.wix.com/about/privacy" target="_blank">Wix Privacy Policy</a>), Wix will redirect the relevant authority to request such data directly from the relevant customer, as the controller of such data. </li></ul></td></tr></tbody></table></div></div>

The security of our users' sensitive data is of extreme importance to us here at Wix and we are 100% committed to protecting it.PCI ComplianceThe PCI DSS is an information security standard for organi...

Security of Wix's Billing Services and PCI Compliance

Discover how Wix prioritizes the security of your sensitive data by adhering to strict compliance standards. Learn about Wix's PCI DSS compliance, which ensures a secure environment for credit card transactions, and explore our certifications in ISO standards that outline best practices for information security and privacy management. Gain confidence in your site's security with our commitment to maintaining the highest encryption standards and compliance measures.

<div data-component-type="text"><div>The security of our users' sensitive data is of extreme importance to us here at Wix and we are 100% committed to protecting it.</div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="pci-compliance" level="3">PCI Compliance</h2></div><div data-component-type="text"><div>The <a data-composite="true" href="https://www.pcisecuritystandards.org/" target="_blank">PCI DSS</a> is an information security standard for organizations or companies that accept credit card payments. This standard helps to create a secure environment by increasing cardholder data, thus reducing credit card fraud.</div></div><div data-component-type="text"><div>Wix is Payment Card Industry Data Security Standards (PCI DSS) compliant and is accredited as a Level 1 service provider and merchant. Wix’s PCI DSS compliance is assessed by an external company, and we are audited on a yearly basis in order to align with PCI standards.</div></div><div data-component-type="text"><div>Wix PCI applications are running in a dedicated environment - with segregation from other product flows and servers - suitable for the highest PCI standards.</div></div><div data-component-type="text"><div>Within our PCI environment, we maintain the highest standard of encryption and storage measures using a FIPS 140-2-certified HSM (Hardware Security Module). Our users’ data at rest encryption utilizes AES-256, the industry’s most broadly used encryption method.</div><div><br /></div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2026/01/08/f1d99aaf-3c5e-483b-b02b-ad1c88de3949/d1a8ead4-ff27-48eb-a67f-97abde479982.png" alt="PCI Merchant cert 2026," /></div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2026/01/08/3fee7e88-a3b5-4563-9630-a74d086f8f62/3dd2ff7f-8197-4b3d-a644-f4ef1100c7c8.png" alt="PCI Service provider cert 2026," /></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="iso-compliance" level="3">ISO Compliance</h2></div><div data-component-type="text"><div><strong>ISO 27001 Compliance<br /></strong>Wix has been audited and certified as ISO 27001 compliant. The ISO 27001 certification outlines industry best practices for managing security risks. </div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2025/06/25/15ac36c6-e8cb-4361-8261-69a3f846200f/114c2b7d-94e9-4435-87a2-0edd837e4d83.png" alt="ISO 27001 cert. Valid until June 2028," /></div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2025/06/25/1d1d1106-ca16-418e-8aa6-53b0454303c9/d757a607-ec1d-4b26-9546-28e716f52090.png" alt="ISO 27001 cert, continued. Valid until June 2028," /></div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2025/06/25/4b2c9853-40b0-4803-9e15-a826af8a8c5a/1c87de8d-de82-4ca2-b216-b43dd7d5f8a6.png" alt="ISO 27001 cert, continued. Valid until June 2028," /></div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2025/06/25/a47cd338-7cdd-4c0f-86ba-a66aa94114f5/07d50735-05fd-457d-a6d3-b48466d32a1e.png" alt="IQ Net ISO 27001 cert, Valid until June 2028," /></div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2025/06/25/9fde6f2e-3cdf-4183-8af2-e497cb62933b/3343cd65-da63-4aca-9562-a713a3d248ce.png" alt="IQ Net ISO 27001 cert, continued. Valid until June 2028," /></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="text"><div><strong>ISO 27701 Compliance</strong><br />
Wix has been audited and certified as ISO 27701 compliant. The ISO 27701 certification outlines industry best practices for privacy information management.</div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2024/12/10/df3974cd-af00-4800-8acf-fd295130379c/16a87fd8-7fcc-42e7-a7ac-2b1cf2498f7e.png" alt="ISO 27701 certificate," /></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="text"><div><strong>ISO 27017 Compliance</strong><br />
Wix has been audited and certified as ISO 27017 compliant. The ISO 27017 certification outlines industry best practices for security techniques in a public cloud computing environment.</div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2024/12/10/fc39215c-6b5e-475e-abc7-8efcd958328e/31f67d55-a1f8-4a0a-b5cb-f5d173d3e548.png" alt="ISO 27017 certificate," /></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="text"><div><strong>ISO 27032 Compliance</strong></div><div>Wix has been audited and certified as ISO 27032 compliant. The ISO 27032 certification outlines industry best practices for information security system management in a cyberspace environment.</div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2024/12/10/c9ea50e4-69bd-4fa9-a222-3bac94f8c478/ad4cb0ba-f716-4201-a8db-67a81ca35717.png" alt="ISO 27032 certificate," /></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="text"><div><strong>ISO 27035 Compliance</strong></div><div>Wix has been audited and certified as ISO 27035 compliant. The ISO 27035 certification outlines industry best practices for security incident management.</div></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2024/12/10/048402a8-bd05-4dff-a285-24b2150bf109/a08fafbe-47a7-4e9e-92d7-74ae01619e31.png" alt="ISO 27035 certificate," /></div></div><div data-component-type="heading"><h2 id="tls-certification" level="3">TLS Certification</h2></div><div data-component-type="text"><div>Transport Layer Security (TLS) is a protocol that helps protect your online financial transactions by ensuring secure communication over a network</div></div><div data-component-type="text"><div>The <a data-composite="true" href="https://www.pcisecuritystandards.org/about_us/" target="_blank">PCI Council</a> states that any organization handling payment card transactions must use TLS 1.2 or higher in order to meet PCI DSS compliance standards.</div></div><div data-component-type="text"><div>Wix uses Transport Layer Security and does meet PCI DSS compliance standards.<br />
We allow a minimum of TLS 1.2 so that out-of-date devices or browsers can access the website on your domain when they try to view it. At the same time, our sites allow the latest version of TLS for browsers which support it.</div></div><div data-component-type="text"><div>Visitors with older browsers may be able to visit your site, however, if their older device protocols don’t meet PCI security standards, they may not be able to complete a transaction.</div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="faqs" level="3">FAQs</h2></div><div data-component-type="text"><div>Click a question below to learn more about Wix's online security.</div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">How do I make my Wix site PCI compliant? </h4><div class="collapsible-content"><div>Every site built on Wix is automatically PCI compliant by default with the highest Payment Card Industry Data Security Standards, regardless of the <a data-composite="true" href="https://support.wix.com/en/article/available-payment-providers-in-your-country" target="">payment provider</a> used.</div><div><br />
This means that our certifications extend to your site and its checkout process.<br />
Wix holds PCI DSS Level 1: Merchant &amp; Service Provider, a standard which provides protection of the privacy and confidentiality of card data used to complete online transactions.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">My site failed a PCI compliance scan because of weak cipher support. Is my site secure? </h4><div class="collapsible-content"><div>It’s currently not possible to edit or disable the ciphers configured on Wix sites. Our servers support a variety of AES-128 encryption methods and offer enhanced security for site visitors using modern browsers.</div><div><br />
External security scans have the potential to fail on Wix sites, however they often don't account for the intricacies of our infrastructure.</div><div><br /></div><div>It’s important to note that every site built on Wix is already PCI compliant with the highest Payment Card Industry Data Security Standards, regardless of the <a data-composite="true" href="https://support.wix.com/en/article/available-payment-providers-in-your-country" target="">payment provider</a> used. </div><div><br /></div><div>You can feel confident knowing that we've invested considerable time and resources to obtain our Level 1 PCI certification, ensuring that your site and its checkout process are fully covered.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">I encountered scanning interference when trying to run a PCI scan on my site. How do I whitelist the scanner IPs?</h4><div class="collapsible-content"><div>We are not able to whitelist any external IP addresses, as this might affect the security of other users, as well as the whole Wix infrastructure. </div><div><br /></div><div>With the service you are using to conduct the scan, try lowering the RPM of the scan requests to avoid being blocked by any of our rate limiters. </div><div><br /></div><div>Every site built on Wix is automatically PCI compliant by default with the highest Payment Card Industry Data Security Standards, regardless of the <a data-composite="true" href="https://support.wix.com/en/article/available-payment-providers-in-your-country" target="">payment provider</a> used. </div></div></div></div>

Wix values the security of our customers' information and we do everything in our power to protect it. Here's what we do to protect your information:Wix contracts security consultants to ensure the se...

Security of Wix's Sign Up Services and User Information

Discover how Wix prioritizes the security of your information through comprehensive measures. Learn about our regular security audits, encryption methods, and multi-layer security architecture that protect your data from breaches. With secure signup and login processes, your personal information remains safe. If you encounter any security issues, find out how to reach our dedicated Wix Security team for assistance.

<div data-component-type="text"><div>Wix values the security of our customers' information and we do everything in our power to protect it. </div></div><div data-component-type="heading"><h2 id="" level="4">Here's what we do to protect your information:</h2></div><div data-component-type="text"><ul><li>Wix contracts security consultants to ensure the security of our user information. They perform regular security audits and infiltration testing to maintain our ISO/PCI security certifications. Any issues that are reported to our security team or raised during security audits these are resolved as soon as possible.</li></ul></div><div data-component-type="text"><ul><li>Wix encrypts databases containing sensitive information, according to PCI standards, to add additional protection of personally identifiable information. Our encryption methods renders this information unreadable without a cryptographic key. </li></ul></div><div data-component-type="text"><ul><li>Wix has a multiple layer security architecture to help protect against 0-day security issues. </li></ul></div><div data-component-type="text"><ul><li>Wix's signup and login services are completed through a secure server. The information provided to Wix in the signup process is secured via HTTPS/ SSL communication. </li></ul></div><div data-component-type="text"><ul><li>Wix uses cryptography hash functions to protect your information. Your password is stored as a hash digest and, in the event of a security breach, your original password cannot be recovered from our servers.  </li></ul></div><div data-component-type="text"><div>If you believe you've found a security issue or vulnerability, please contact the Wix Security team. Click <a href="https://support.wix.com/en/article/reporting-a-security-issue" target="_blank">here</a> to learn more. </div></div>

The security of our users' accounts and sites is of extreme importance to us here at Wix and we are committed to online safety. If you believe you have found a virus on a Wix site please report it to:...

Virus Protection on Wix

Report any suspected viruses on Wix sites to ensure the safety and security of your account. Learn how to contribute to online safety by notifying Wix directly at security-report@wix.com, as protecting users' sites is a top priority for us.

<div data-component-type="text"><div>The security of our users' accounts and sites is of extreme importance to us here at Wix and we are committed to online safety. </div></div><div data-component-type="text"><div>If you believe you have found a virus on a Wix site please report it to: <a data-composite="true" href="mailto:security-report@wix.com" target="">security-report@wix.com</a>.</div></div>

The security of our users' accounts and sites is of extreme importance to us here at Wix and we are committed to online safety.  Wix employs full-time security experts and uses advanced security tools...

Third Party Security and Vulnerability Scanning Tools

Discover how Wix prioritizes the security of your account and site by employing dedicated security experts and advanced tools. Learn about the importance of marking your Wix site as safe in your antivirus software to avoid false virus alerts. If you encounter any security issues, find out how to report them directly to the Wix Security team for assistance.

<div data-component-type="text"><div>The security of our users' accounts and sites is of extreme importance to us here at Wix and we are committed to online safety.  </div></div><div data-component-type="text"><div>Wix employs full-time security experts and uses advanced security tools to locate and eliminate security issues. We also perform regular internal security audits to maintain our <a href="https://support.wix.com/en/article/security-of-wixs-billing-services-and-pci-compliance">ISO/PCI security certifications</a>.</div></div><div data-component-type="text"><div>Certain antivirus software might not recognize the URL when loading a Wix site and might consider it a virus or an unsafe website. If this occurs, please go to the settings of your antivirus software and mark the domain name as a safe URL.</div></div><div data-component-type="text"><div>If you believe you've found a security issue or vulnerability, please contact the Wix Security team: <a data-composite="true" href="mailto:security-report@wix.com" target="">security-report@wix.com</a></div></div>

The security of our users' accounts is of utmost importance to us here at Wix and we are dedicated to online safety.If you logged in from a social login, such as Google or Facebook, or if you updated ...

Email from Wix Regarding Changes Made to Your Account

Protect your Wix account by staying informed about security updates. Learn how to respond if you receive an email stating "Your account settings have been updated" after logging in with social accounts or changing your email/password. If you didn’t authorize these changes, act quickly by changing your password and contacting Wix Customer Care. Additionally, find out how to use the Account Recovery Form if you face access issues or suspect account takeover.

<div data-component-type="text"><div>The security of our users' accounts is of utmost importance to us here at Wix and we are dedicated to online safety.</div></div><div data-component-type="text"><div>If you logged in from a social login, such as Google or Facebook, or if you updated your email address or password, you will receive an email saying &quot;Your account settings have been updated&quot;. If you didn't authorize these changes, <a data-composite="true" href="https://support.wix.com/en/article/changing-your-wix-password" target="">change your Wix account password</a> immediately and then contact <a data-composite="true" href="http://www.wix.com/contact/en" target="_blank">Wix Customer Care</a>. </div></div><div data-component-type="text"><div>Complete our <a data-composite="true" href="https://users.wix.com/account-recovery/reset-account-information" target="_blank">Account Recovery Form</a> if you are experiencing issues accessing your account, or if someone took over your account.  </div></div>

Wix take security issues very seriously and are committed to protecting our users' data and private information. If you believe you've found a security issue or vulnerability, please contact the Wix S...

Reporting a Security Issue

Learn how to report security issues and vulnerabilities to Wix, ensuring your data and privacy are protected. If you discover a security concern, you can contact the Wix Security team or report spam and phishing attempts through designated pages. Additionally, security researchers can submit vulnerability reports to the Bug Bounty program. This article guides you on the steps to take for maintaining a secure experience on Wix.

<div data-component-type="text"><div>Wix take security issues very seriously and are committed to protecting our users' data and private information. </div></div><div data-component-type="text"><div>If you believe you've found a security issue or vulnerability, please contact the Wix Security team using our <a data-composite="true" href="https://www.wix.com/contact?&amp;nodeId=0b6e14e6-6841-459c-8ad3-8d35736f2dc8&amp;referral=securitykb" target="_blank">security contact page</a>. </div></div><div data-component-type="text"><div>If you'd like to report spam or phishing, send us the email address using our <a data-composite="true" href="https://www.wix.com/support-chatbot?nodeId=uTMpR0EVmEU8G0WiM0xh&amp;referral=securityKb" target="_blank">suspicious messaging contact page</a>.</div></div><div data-component-type="text"><div>If you are a security researcher and would like to submit your vulnerability report to our Bug Bounty program, please send the report with all the relevant details to <a href="mailto:bugbounty@wix.com" target="_blank">bugbounty@wix.com</a>.
</div></div><div data-component-type="text"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Security issues or vulnerabilities may include:</span><ul style="margin-top:0pt;margin-bottom:0pt;"><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">XSS attack</span></p></li><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">CSRF attack </span></p></li><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">SQL injection vulnerability </span></p></li><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">DNS hijacking</span></p></li><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Session vulnerability </span></p></li><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Unsecured API </span></p></li><li dir="ltr" style="list-style-type:disc;font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:11pt;font-family:Arial;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Authentication spoofing </span></p></li></ul></div><div data-component-type="html"><div class="call-to-action-wrapper" style="display: flex; flex-direction: row; justify-content: space-between; align-items: center; flex-wrap: wrap; padding: 18px 24px; border: 1px solid #d6e6fe; gap: 15px; border-radius: 6px; box-sizing: border-box; width: 100%; max-width: 100%; overflow: hidden;">
    <div class="call-to-action-wrapper-text" style="font-size: 14px; font-weight: 700; line-height: 18px;">
        Contact the relevant team for
    </div>
    <div class="call-to-action-buttons-wrapper" style="display: flex; flex-direction: row; gap: 6px;">
      <a target="_blank" href="https://www.wix.com/upgrade/abuse" class="call-to-action-button call-to-action-secondary-button article-get-started-button" style="padding: 6px 18px; border-radius: 100px; font-size: 14px; font-weight: 500; line-height: 18px; text-decoration: none; background-color: #ffffff; border: 1px solid #d6e6fe; color: #116dff;">
        Abuse
      </a>
      
        <a target="_blank" href="https://www.wix.com/upgrade/abuse" class="call-to-action-button call-to-action-primary-button article-log-in-button" style="padding: 6px 18px; border-radius: 100px; font-size: 14px; font-weight: 500; line-height: 18px; text-decoration: none; background-color: #116dff; color: #ffffff;">
        Copyright Infringement
      </a>
  </div>
</div></div><div data-component-type="informative"><div class="info-container" info-color="blue"><div class="info-title"></div><div class="info-content"><ul>
  <li>If you logged in to your Wix account from a social login, such as Google or Facebook, or if you updated your email address, you will receive an email saying &quot;Your account settings have been updated&quot;. If you didn't authorize these changes please <a data-composite="true" href="https://www.wix.com/contact" target="_blank">contact Wix Customer Care</a>, rather than security, to look into matters further. </li>  <li>If you are experiencing issues accessing your account, or if someone took over your account, <a data-composite="true" href="https://www.wix.com/support-chatbot?nodeId=a165cf6d-f112-408a-9e11-0f746339c3f1" target="_blank">complete our account recovery form</a>. </li></ul></div></div></div>

We highly recommend taking any and all actions in order to improve the safety of your Wix account and personal information.Tips for creating a secure Wix passwordWe recommend the following tips for cr...

Creating a Secure Password and Keeping Your Wix Account Secure

Enhance the security of your Wix account with essential tips for creating a strong password and maintaining account safety. Discover how to craft a secure password that includes various character types, avoid using personal information, and utilize the Wix Password Strength Indicator. Additionally, learn about enabling 2-Step verification, managing login information, and protecting your computer to keep your account safe. Take proactive steps to safeguard your personal information today!

<div data-component-type="text"><div>We highly recommend taking any and all actions in order to improve the safety of your Wix account and personal information.</div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="tips-for-creating-a-secure-wix-password" level="3">Tips for creating a secure Wix password</h2></div><div data-component-type="text"><div>We recommend the following tips for creating the most secure password for your Wix account:</div><ul>
  <li>Choose a password that contains at least 8-12 characters. </li>  <li>Do not include any parts of your name (first and last) in your password, or anything related to your personal info.</li>  <li>Make sure to include at least 3 out of the 4 character types:
    <ul>
      <li>Lowercase letters</li>      <li>Uppercase letters </li>      <li>Numbers</li>      <li>Symbols</li>    </ul>  </li>  <li>Use a unique password for Wix. Do not use a password that is used for other applications, such as your regular email account.</li>  <li>Consider using a password manager and an automatic password generator to create safe and secure passwords.</li>  <li>Make your password a passphrase of at least 12 characters. We recommend using an easy-to-remember sentence that includes numbers and special characters. For example, you could use the first 2 letters of each word of a sentence to create an even stronger password. </li>  <li>Use the Wix Password Strength Indicator to measure the safety of your password. The indicator prompts you to create a tough-to-break password that has extra characters and symbols. The colored bar at the top of the indicator updates you on the strength of your password as you create it.</li></ul></div><div data-component-type="image"><div class="img-container" style="text-align:center"><img src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2021/06/16/4e78c027-5439-4648-b040-d8053c40b1c6/b9d08c8e-bad9-4cb3-bb3c-76330e39d5c7.gif" alt="indicator displaying the strength of a password," /></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="tips-for-keeping-your-wix-account-secure" level="3">Tips for keeping your Wix account secure</h2></div><div data-component-type="text"><div>We recommend the following tips for keeping your Wix account secure:</div><ul>
  <li>Keep your login information private. Share your login information with trusted sources only.</li>  <li>Enable <a data-composite="true" href="https://support.wix.com/en/article/using-2-step-verification-for-your-wix-account" target="">2-Step verification</a> to add an extra layer of security to your account.</li>  <li>If multiple people are working on your Wix site, consider adding them as <a data-composite="true" href="https://support.wix.com/en/article/roles-permissions-overview" target="_blank">site collaborators</a>, rather than sharing your password.</li>  <li>Make sure to lock and password protect your computer. We suggest enabling automatic locking of your computer if it’s unattended for 5 minutes (e.g. lock on screensaver).</li>  <li>Sign out of your Wix and email accounts if you are using a shared browser.</li>  <li>Do not allow your browser to save your password if you are using a shared browser. </li>  <li>Add a <a data-composite="true" href="https://support.wix.com/en/article/updating-the-mobile-phone-number-in-your-wix-account" target="">Recovery Phone Number</a> to help you recover your account in the event you have forgotten, or lost access to your email.</li></ul></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title">Next:</div><div class="info-content"><div>Learn how to <a data-composite="true" href="https://support.wix.com/en/article/changing-your-wix-password" target="">change the password of your Wix account</a>.</div></div></div></div>

The security of our users' accounts is of extreme importance to us here at Wix and we are 100% committed to online safety. Wix's sign up and login services are completed through a secure server. In ad...

Security of Wix Sign Up Services

Discover how Wix prioritizes your account security with robust sign-up and login services on a secure server. Learn about our commitment to protecting your passwords through one-way encryption, ensuring they remain safe even in the event of a database breach. For additional tips on enhancing your account security, check out our password recommendations.

<div data-component-type="text"><div>The security of our users' accounts is of extreme importance to us here at Wix and we are 100% committed to online safety. </div></div><div data-component-type="text"><div>Wix's sign up and login services are completed through a secure server. In addition, Wix does not keep users' passwords in its database, but rather encrypts them in a one-way encryption method. This means that, even in the event of a database breach, the passwords cannot be restored by any means.</div></div><div data-component-type="text"><div>For advice on securing your account please <a data-composite="true" href="https://support.wix.com/en/article/creating-a-secure-password-and-keeping-your-wix-account-secure" target="">see our password recommendations</a>. </div></div>

All registered domains are listed in the WHOIS database. Searching for a domain in the database allows you to view information such as the domain's registration and expiry dates, who owns the domain, ...

About Domain Privacy and Protection

Discover how to manage your domain registration and privacy settings with Wix. This article explains the WHOIS database, the various domain protection options available, including public and private registration, and the added security of DNSSEC. Learn how to keep your personal information safe from unwanted solicitations and identity theft, ensuring your domain remains secure. Additionally, find out about specific regulations for EU users and which TLDs do not support private registration.

<div data-component-type="text"><div>All registered domains are listed in the <a data-composite="true" href="https://www.wix.com/domains/whois" target="_blank">WHOIS database</a>. Searching for a domain in the database allows you to view information such as the domain's registration and expiry dates, who owns the domain, and the owner's contact information. </div></div><div data-component-type="text"><div>Wix offers over 400 top-level domain (TLD) extensions for you to purchase. See the full available <a data-composite="true" href="https://www.wix.com/domains/tld-list" target="_blank">TLDs list</a>. When you <a data-composite="true" href="https://www.wix.com/domains" target="_blank">buy a new domain from Wix</a>, or transfer your domain to your Wix account, you can choose to purchase additional privacy and domain protection.  </div></div><div data-component-type="text"><div>Wix offers the following levels of protection for your personal information and domain security: Public registration, Private registration, or Private registration and DNSSEC.</div></div><div data-component-type="informative"><div class="info-container" info-color="orange"><div class="info-title">Important:</div><div class="info-content"><div>The information in this article only applies to you when Wix is your registrar. If your domain is registered under a different registrar, even if purchased with Wix as a reseller, other terms may apply to you.</div></div></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="public-registration" level="3">Public registration</h2></div><div data-component-type="text"><div>Selecting <strong>Public registration</strong> when buying or transferring your domain means that your personal information is available on WHOIS. </div></div><div data-component-type="text"><div>Some information is not publicly listed, however. As your registrar, Wix automatically lists an alternative email address (e.g. example.com@wix-domains.com) and phone number instead of your personal information. To help minimize spam, anyone trying to get in touch with you will be referred to a dedicated online contact form instead (with the exception of ICANN, the domain regulatory body).</div></div><div data-component-type="text"><div>Your other personal and contact information is publicly available. To protect your <a data-composite="true" href="https://www.wix.com/domains/security" target="_blank">domain security</a> and personal info, you can purchase additional protection such as <a data-composite="true" href="https://www.wix.com/domains/security/domain-privacy-protection" target="_blank">private domain registration</a> or DNSSEC. <a data-composite="true" href="https://support.wix.com/en/article/about-domain-privacy#users-in-the-eu" target="">Users in the EU</a> are entitled to have some of their contact details hidden in accordance with GDPR.</div></div><div data-component-type="informative"><div class="info-container" info-color="orange"><div class="info-content"><div>The generic phone number and email are currently only available for newly purchased or newly transferred domains. Domains that were previously purchased or transferred appear in WHOIS with all personal information, including your phone number and email.</div></div></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="private-registration" level="3">Private registration</h2></div><div data-component-type="text"><div>Selecting <strong>Private registration</strong> (with Wix as your registrar) allows you to keep your personal information private. With this option, all of your personal details are replaced with Wix's details and are not available in the public WHOIS database. </div></div><div data-component-type="text"><div>Similar to public registration, Wix lists an alternative email address (e.g. example.com@wix-domains.com) and phone number instead of your personal information. To help minimize spam, anyone trying to get in touch with you will be referred to a dedicated online contact form instead (with the exception of ICANN, the domain regulatory body).</div></div><div data-component-type="text"><div>You can <a data-composite="true" href="https://support.wix.com/en/article/activating-private-registration-for-a-wix-domain#turning-off-privacy-protection-for-your-domain" target="">temporarily turn off private registration for your Wix domain</a> whenever you need (for example, if you wish to transfer the domain to another registrar). </div></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title">Already purchased a domain? </div><div class="info-content"><div>If you have already purchased or transferred your domain to Wix, you can add privacy protection by manually extending your domain registration for at least an additional year. Learn more about <a data-composite="true" href="https://support.wix.com/en/article/activating-private-registration-for-a-wix-domain" target="">activating private registration for a Wix domain</a>. </div></div></div></div><div data-component-type="heading"><h2 id="" level="4">Private registration safeguards you against:</h2></div><div data-component-type="text"><div><strong>Identity theft</strong><br />
Just as you may protect your banking information, address, or phone number, it is also important to keep other personal information private. Private registration helps to protect against malicious attacks that seek to steal your information.</div></div><div data-component-type="text"><div><strong>Unwanted solicitations</strong><br />
If your personal information is available on WHOIS it is also easily accessible to telemarketers, spammers, and scammers. </div></div><div data-component-type="text"><div><strong>Domain hijacking</strong><br />
Private registration, with Wix as your registrar, helps protect against those who seek to purchase your domain name. Domain names can be very valuable and, as a result, you may be harassed with attempts to purchase your domain. </div></div><div data-component-type="informative"><div class="info-container" info-color="orange"><div class="info-title">Important:</div><div class="info-content"><ul>
  <li>Private registration does not guarantee protection from spammers. Listing your personal details (e.g. email address) on your site might also put you at risk. We recommend <a data-composite="true" href="https://support.wix.com/en/article/wix-forms-adding-and-setting-up-a-form-on-your-site" target="">using a contact form on your site</a> instead of sharing your contact details. </li>  <li>Private registration does not protect you in cases where the disclosure of your details is required under applicable law. </li></ul></div></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="private-registration-and-dnssec" level="3">Private registration and DNSSEC</h2></div><div data-component-type="text"><div>Wix offers Domain Name System Security Extensions (DNSSEC) in combination with private registration for the highest level of privacy and domain protection. DNSSEC is available in all non-EU countries, and for all .com domains.</div></div><div data-component-type="text"><div>Selecting <strong>Private registration and DNSSEC </strong>provides all of the protections that come with private registration, with the extra security that DNSSEC offers.  </div></div><div data-component-type="text"><div>DNSSEC adds a security seal to your domain, helping to prevent cyberattacks and enhancing your site’s integrity by securing your visitors' private information. </div></div><div data-component-type="text"><div>When someone visits your site, DNSSEC makes sure that they are directed to the correct IP address associated with your domain name. It acts as a shield, protecting your site and your visitors from cyberattacks (such as being redirected to a malicious website). </div></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title">Already purchased a domain?</div><div class="info-content"><div>To enable DNSSEC for your existing Wix domain, extend your domain for at least one additional year and add the <strong>Private registration and DNSSEC </strong>option to your cart. Learn more about <a data-composite="true" href="https://support.wix.com/en/article/activating-dnssec-for-a-wix-domain" target="">activating DNSSEC for your Wix Domain</a>.</div></div></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="users-in-the-eu" level="3">Users in the EU</h2></div><div data-component-type="text"><div>In accordance with the EU's General Data Protection Regulation (GDPR) rules, the personal details of users located in the EU do not appear in the public WHOIS records. An alternative email address (e.g. example.com@wix-domains.com) and telephone number replace EU users' contact details, and they refer anyone trying to get in touch with them to a dedicated online contact form instead (with the exception of ICANN, the domain regulatory body).</div></div><div data-component-type="text"><div>The only information that appears publicly about users in the EU is their country, state/province, and organization. EU users who opt for private registration will have all of their personal details hidden in the public WHOIS database.</div></div><div data-component-type="informative"><div class="info-container" info-color="blue"><div class="info-title">Note:</div><div class="info-content"><div>Personal information, such a name, address, and email, may still be disclosed to third parties with legitimate interest (which is determined by the domain registrar) or as otherwise required under applicable law. </div></div></div></div><div data-component-type="line"><hr line-style="thin" /></div><div data-component-type="heading"><h2 id="top-level-domain-endings-tlds-that-dont-support-private-registration" level="3">Top level domain endings (TLDs) that don't support private registration</h2></div><div data-component-type="text"><div>The following top-level domain endings do not currently support private registration.</div></div><div data-component-type="text"><ul>
  <li>ai</li>  <li>ca</li>  <li>co.il</li>  <li>co.uk</li>  <li>com.au</li>  <li>com.br</li>  <li>de</li>  <li>fr</li>  <li>london</li>  <li>mx</li>  <li>tokyo</li>  <li>in</li>  <li>co.in</li>  <li>firm.in</li>  <li>gen.in</li>  <li>ind.in</li>  <li>net.in</li>  <li>org.in</li>  <li>be</li>  <li>ch</li>  <li>nl</li>  <li>at</li>  <li>co.at</li>  <li>or.at</li>  <li>it</li></ul></div>

Phishing attacks usually originate from email messages that attempt to lure the recipient into updating their personal information on fake, but very real-looking websites. The protection works by chec...

Enabling Phishing and Malware Protection

Discover how to enable phishing and malware protection in your web browser to safeguard your personal information from deceptive attacks. This article guides you through the steps for Chrome, Firefox, Safari, and Edge, ensuring you can block dangerous content and enhance your online security. By following these instructions, you can browse with confidence and protect yourself from potential threats.

<div data-component-type="text"><div>Phishing attacks usually originate from email messages that attempt to lure the recipient into updating their personal information on fake, but very real-looking websites. </div></div><div data-component-type="text"><div>The protection works by checking the sites that you visit against lists of reported phishing and malware sites. These lists are automatically downloaded and updated every 30 minutes or so. The technical details of the safe-browsing protocol are also <a href="http://code.google.com/p/google-safe-browsing/wiki/Protocolv2Spec" target="_blank">publicly available</a>.</div></div><div data-component-type="heading"><h2 id="" level="3">To enable phishing and malware protection:</h2></div><div data-component-type="tabs"><div class="tabs-wrapper"><div class="headings-wrapper"><div data-slug="Chrome" class="tab-heading heading-0">Chrome</div><div data-slug="Firefox" class="tab-heading heading-1">Firefox</div><div data-slug="Safari" class="tab-heading heading-2">Safari </div><div data-slug="Edge" class="tab-heading heading-3">Edge</div></div><div class="tab-contents-wrapper"><div class="tab-content"><div data-component-type="text"><ol>
  <li>Click the <strong>More Actions</strong> icon <img data-composite="true" src="https://d2x3xhvgiqkx42.cloudfront.net/12345678-1234-1234-1234-1234567890ab/7f40210b-c6c2-4c15-bbcf-5bb78a69d10e/2024/11/08/326da26b-39ef-4f3b-aabc-58b4e84c4e62/18b0cbab-c4c6-442a-a239-3bf9246ff424.png" /> on the Chrome browser toolbar.</li>  <li>Click <strong>Settings</strong>.</li>  <li>Click <strong>Privacy and security</strong>.</li>  <li>Click <strong>Security</strong>.</li>  <li>Ensure the <strong>Standard Protection</strong> option is selected. <br />
<strong>Tip</strong>: For additional, proactive, security against phishing and malware, you can select the <strong>Enhanced Protection</strong> option.</li></ol></div></div><div class="tab-content"><div data-component-type="text"><ol>
  <li>Click the menu button <img data-composite="true" src="https://assets-prod.sumo.prod.webservices.mozgcp.net/media/uploads/gallery/images/2021-05-15-11-18-38-e5b736.png" /> and select <strong>Settings</strong>.</li>  <li>Click the <strong>Privacy &amp; Security</strong> panel.</li>  <li>In the <strong>Security</strong> section, Select the checkboxes: 
    <ul>
      <li><strong>Block dangerous and deceptive content</strong>: Check this box if you want Firefox to block potential malware or content that can trick you into downloading malware or unintentionally entering information. You can also refine your choices by checking or unchecking the following items:
        <ul>
          <li><strong>Block dangerous downloads</strong>: Blocks potential viruses and other malware.</li>          <li><strong>Warn you about unwanted and uncommon software</strong>: Lets you know if you're about to download potentially unwanted software or uncommon software that may contain a virus or make unexpected changes to your computer.</li>        </ul>      </li>    </ul>  </li></ol></div></div><div class="tab-content"><div data-component-type="text"><ol>
  <li>Click <strong>Safari</strong> in the top menu bar and select <strong>Settings.</strong></li>  <li>Go to the <strong>Security</strong> tab.</li>  <li>Check the <strong>Warn when visiting a fraudulent website</strong> checkbox. <br />
<strong>Tip</strong>: As an additional layer of security, you can also ensure that the <strong>Block Pop-up Windows </strong>option is enabled:
    <ol>
      <li>Go to <strong>Safari</strong>, click<strong> Settings</strong>.</li>      <li>In the <strong>Websites</strong> tab, select <strong>Pop-up Windows</strong> and set it to <strong>Block</strong> <strong>and</strong> <strong>Notify </strong>or<strong> Block</strong>.</li>    </ol>  </li></ol></div></div><div class="tab-content"><div data-component-type="text"><ol>
  <li>Select <strong>Settings and more.</strong></li>  <li>Click <strong>Settings.</strong></li>  <li>Click<strong> Privacy, search, and services </strong>.</li>  <li>Under <strong>Services</strong>, enable <strong>Microsoft Defender SmartScreen</strong>.</li></ol></div></div></div></div></div>

Wix takes privacy issues very seriously and is committed to protecting our users' data and private information.To help make your site privacy compliant and to discover how Wix processes the data of bo...

Reporting a Privacy Issue

Discover how to ensure your site is privacy compliant with Wix's comprehensive resources. Learn about creating a privacy policy, preparing for GDPR and CCPA, managing cookies, and adding a cookie banner. This article guides you through essential privacy practices to protect your data and that of your visitors, while also providing support for reporting issues or security concerns.

<div data-component-type="text"><div>Wix takes privacy issues very seriously and is committed to protecting our users' data and private information.</div></div><div data-component-type="text"><div>To help make your site privacy compliant and to discover how Wix processes the data of both you and your site visitors, our <a data-composite="true" href="https://support.wix.com/en/privacy-gdpr" target="">Help Center</a> can assist you with privacy issues including:</div><ul>
  <li><a data-composite="true" href="https://support.wix.com/en/article/creating-a-privacy-policy" target="">Creating a privacy policy</a></li>  <li><a data-composite="true" href="https://www.wix.com/about/privacy" target="_blank">Wix's privacy policy</a></li>  <li><a data-composite="true" href="https://support.wix.com/en/article/preparing-your-wix-site-for-the-gdpr" target="">Preparing your site for the GDPR</a></li>  <li><a data-composite="true" href="https://support.wix.com/en/article/preparing-your-wix-site-for-ccpa" target="">Preparing your site for the CCPA</a></li>  <li><a data-composite="true" href="https://support.wix.com/en/article/cookies-and-your-wix-site" target="">Cookies and Your Wix Site</a></li>  <li><a data-composite="true" href="https://support.wix.com/en/article/displaying-a-cookie-banner-on-your-site" target="">Adding a Cookie Banner to your site</a></li>  <li><a data-composite="true" href="https://support.wix.com/en/article/managing-your-sites-consent-log" target="">Managing your site's consent log</a></li></ul></div><div data-component-type="text"><div>If you believe you've found a privacy issue, or have a query regarding our privacy practices, please <a data-composite="true" href="https://www.wix.com/support-chatbot?nodeId=kKKuIuXsiPa1kiePMmcA&amp;type=privacyShieldPolicy&amp;referral=privacyPolicy" target="_blank">contact our team</a>. </div></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title">For other issues related to Wix policy:</div><div class="info-content"><ul>
  <li>If you wish to report specific content such as phishing, spam, copyright infringement, trademark infringement, or otherwise abusive content created on a Wix site, please <a data-composite="true" href="https://www.wix.com/abuse" target="_blank">visit our report abuse page</a>.</li>  <li>If you are experiencing issues accessing your account, or if you believe someone has taken over your account, complete our <a data-composite="true" href="https://users.wix.com/account-recovery/reset-account-information" target="_blank">account recovery form</a>.</li>  <li>If you have a security issue, please <a data-composite="true" href="https://www.wix.com/contact?&amp;nodeId=0b6e14e6-6841-459c-8ad3-8d35736f2dc8&amp;referral=securitykb" target="_blank">contact our Security team</a>.</li></ul></div></div></div>

Currently, it is not possible to block specific IP addresses or visitors from specific locations from accessing your site.Workaround:You can use the Blocky IP &amp; Country Blocker app by Effective Ap...

Request: Blocking Specific IP Addresses

Discover how to manage site access by using the Blocky IP & Country Blocker app from the Wix App Market. While you currently can't block specific IP addresses or visitors from certain locations directly, this app provides a workaround to enhance your site's security. Your feedback is valuable as we continue to improve our services.

<div data-component-type="text"><div>Currently, it is not possible to block specific IP addresses or visitors from specific locations from accessing your site.</div></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title">Workaround:</div><div class="info-content"><div>You can use the <a data-composite="true" href="https://support.wix.com/en/article/third-party-app-blocky-ip-country-blocker-by-effective-apps" target="">Blocky IP &amp; Country Blocker app by Effective Apps</a> from the Wix App Market to block IP addresses and countries.</div></div></div></div><div data-component-type="informative"><div class="info-container" info-color="blue"><div class="info-title">Note: </div><div class="info-content"><div>Wix prevents registration and use of services <a data-composite="true" href="https://support.wix.com/en/article/wix-account-country-limitations" target="">from certain countries</a>.</div></div></div></div><div data-component-type="text"><div>We are always working to update and improve our products, and your feedback is hugely appreciated. </div></div>

Currently, it's not possible to add or ﻿customize security response headers, via code or otherwise, unless you have the Wix Studio enterprise solution. 
  Wix provides fully managed, enterprise-grade ...

Request: Adding and Customizing Security Headers

Discover the limitations regarding the customization of security response headers on Wix sites. Currently, you can only add or customize these headers if you have the Wix Studio enterprise solution. Learn about Wix's fully managed, enterprise-grade security measures that protect your site without needing additional services. If you're interested in the enterprise solution, you can contact the sales team for more information.

<div data-component-type="text"><div>Currently, it's not possible to add or ﻿customize security response headers, via code or otherwise, unless you have the <a data-composite="true" href="https://www.wix.com/studio/enterprise" target="_blank">Wix Studio enterprise solution</a>. </div></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title"></div><div class="info-content"><ul>
  <li>Wix provides fully managed, enterprise-grade <a data-composite="true" href="https://support.wix.com/en/article/wix-security-measures-overview" target="">security for all Wix websites</a>. No additional premium services need to be purchased to ensure your site and account are secure.</li>  <li>To enquire about our enterprise solution for your organization, <a data-composite="true" href="https://www.wix.com/wix-platform/new-enterprise?referrer=studio-form-en" target="">contact our sales team</a>.</li></ul></div></div></div><div data-component-type="text"><div>We are always working to update and improve our products, and your feedback is hugely appreciated.</div></div>

Virus, malware, and phishing warnings can appear on Wix websites for a number of different reasons. Typically, these warnings are incorrect identifications; or what is called a “false positive”.A fals...

Troubleshooting Virus, Malware, and Phishing Warnings

Learn how to address virus, malware, and phishing warnings on your Wix website, which are often false positives. Discover how to resolve issues related to misconfigured DNS records, domain propagation, domain reputation, incorrect antivirus software detection, and strict network security measures. By following these steps, you can ensure your site is recognized as safe and accessible. If problems persist, reach out to the Wix security team for further assistance.

<div data-component-type="text"><div>Virus, malware, and phishing warnings can appear on Wix websites for a number of different reasons. Typically, these warnings are incorrect identifications; or what is called a “false positive”.</div></div><div data-component-type="text"><div>A false positive occurs when a security system, such as antivirus software, mistakenly identifies something as a threat, though it is actually safe.</div></div><div data-component-type="text"><div>Click an issue below to find out how to resolve it:</div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Misconfigured DNS records </h4><div class="collapsible-content"><div>When DNS records are not set up correctly, they might trigger alerts that incorrectly flag a site as potentially harmful.</div><div><br /></div><div>To ensure that your DNS records are properly configured, visit the <a data-composite="true" href="https://support.wix.com/en/article/wix-domain-assistant-3777632" target="">Wix Domain Assistant</a>.</div><div>Once your DNS configurations are corrected, the false positive warnings should be resolved.<br />
<strong>Note</strong>: Allow 48hrs for your updated DNS records to propagate.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Domain propagation </h4><div class="collapsible-content"><div>If you recently updated your domain’s DNS records, then your domain may be in a propagation period. This can take up to 48 hours to complete. </div><div><br />
During this time, your site may not be accessible from all devices, or may appear as insecure. As soon as propagation is complete, your site will be accessible and secure worldwide.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Domain reputation</h4><div class="collapsible-content"><div>Sometimes a domain is used to distribute malware or for phishing attacks, then later it becomes available again for anyone to purchase and register.</div><div><br /></div><div>You can use the following publicly available tools in order to check the reputation of your domain and website: </div><ul>
  <li><a data-composite="true" href="https://transparencyreport.google.com/safe-browsing/search?hl=en" target="_blank">Google Transparency Report</a></li>  <li><a data-composite="true" href="https://www.virustotal.com/gui/home/url" target="_blank">VirusTotal</a></li></ul><div><br /></div><div>If any vendors from VirusTotal or Google report your site as malicious, you can report these false positives directly to the respective vendors. Once the detections are lifted, your website will load as expected.</div><div><br /></div><div>You can report false positives by visiting <a data-composite="true" href="https://docs.virustotal.com/docs/false-positive-contacts" target="">Virus Total False Positive Contacts</a>.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Incorrect AV software detection</h4><div class="collapsible-content"><div>Antivirus programs have a fairly broad set of criteria for deciding whether or not a file or site is safe, and no antivirus program is 100% immune to false positives.</div><div><br /></div><div>In order to resolve the false positive warning you are encountering, please go to the Settings within your antivirus software and add your website, including Wix.com, to the whitelist (allow list). To do so:</div><ol>
  <li>Type<strong> &quot;add website to whitelist (antivirus software provider name)&quot;</strong> into your search engine.</li>  <li>Click the support page for your antivirus software provider and follow the given instructions.</li></ol></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Strict network security measures</h4><div class="collapsible-content"><div>Public and private networks often implement specific security protocols to protect sensitive information and maintain the integrity of their systems. As a result, access to certain URLs - including Wix servers and sites - may be restricted. </div><div><br /></div><div>While these measures are designed to prevent potential risks, they can sometimes inadvertently block or flag legitimate, trusted websites as the system prioritizes caution.</div><div><br /></div><div>In order to resolve the false positive warning or block you are encountering, we advise contacting the relevant IT department at your location to see if they can whitelist your website, including Wix.com.</div></div></div></div><div data-component-type="text"><div>Wix’s dedicated security team actively scans our platform and infrastructure for security threats on a regular basis. This is complemented by 24/7 monitoring to detect vulnerabilities and misconfigurations. You can trust that we are taking every necessary measure to maintain a secure and safe environment for you. </div></div><div data-component-type="text"><div>For additional website security information, see our <a data-composite="true" href="https://support.wix.com/en/article/wix-security-measures-overview" target="">Wix Security Measures Overview</a></div></div><div data-component-type="informative"><div class="info-container" info-color="green"><div class="info-title"></div><div class="info-content"><div>If, after troubleshooting using the steps above, you still encounter security issues, <a data-composite="true" href="https://support.wix.com/en/article/reporting-a-security-issue" target="">contact the Wix security team</a> and we'll be happy to assist you.</div></div></div></div>

The NIS2 directive is the most comprehensive cybersecurity law in the European Union.The directive’s main goal is to enhance the security of network and information systems operating inside the EU by ...

Wix and The EU NIS2 Directive

Discover the key aspects of the NIS2 directive, the EU's comprehensive cybersecurity law aimed at strengthening the security of network and information systems. Learn how Wix complies by appointing Wix Online Platforms Limited as its main establishment and designating a point of contact for inquiries. This article provides essential information on the obligations for critical infrastructure providers and how to reach Wix for further questions.

<div data-component-type="text"><div>The <a data-composite="true" href="https://digital-strategy.ec.europa.eu/en/policies/nis2-directive" target="_blank">NIS2 directive</a> is the most comprehensive cybersecurity law in the European Union.</div></div><div data-component-type="text"><div>The directive’s main goal is to enhance the security of network and information systems operating inside the EU by obligating the providers of critical infrastructure and essential services to implement appropriate security measures and report any incidents to the relevant authorities.</div></div><div data-component-type="text"><div>Pursuant to article 2, Wix appoints Wix Online Platforms Limited as the main establishment for the purposes of NIS2 directive based on the highest number of employees in the Union.</div></div><div data-component-type="text"><div>Wix's point of contact for inquiries from member state authorities, the EU Commission, ENISA, and recipients of the service is <a data-composite="true" href="mailto:legal@wix.com" target="_blank">legal@wix.com</a>. Please submit inquiries in English.</div></div>

Currently, Wix does not offer a dedicated addendum for DORA-related (Digital Operational Resilience Act) contractual provisions.DORA applies to the EU financial sector, but does not apply to Wix.com d...

Request: DORA Addendum

Understand the implications of the Digital Operational Resilience Act (DORA) for your business and how it relates to Wix. While DORA does not apply directly to Wix.com, it's important to seek legal advice regarding its applicability. Explore our Wix Terms of Use, Privacy Policy, and Security resources to learn about the cybersecurity measures we have in place to protect you. Your feedback is valuable as we continue to enhance our products.

<div data-component-type="text"><div>Currently, Wix does not offer a dedicated addendum for DORA-related (Digital Operational Resilience Act) contractual provisions.</div></div><div data-component-type="text"><div><a data-composite="true" href="https://www.eiopa.europa.eu/digital-operational-resilience-act-dora_en" target="_blank">DORA</a> applies to the EU financial sector, but does not apply to Wix.com directly. Wix cannot provide you with legal advice on DORA applicability to your business. We recommend that you seek legal advice to assist you.</div></div><div data-component-type="text"><div>Take a look at our <a data-composite="true" href="https://www.wix.com/about/terms-of-use" target="">Wix Terms of Use</a>, <a data-composite="true" href="https://www.wix.com/about/privacy" target="_blank">Wix Privacy Policy</a>, <a data-composite="true" href="https://www.wix.com/trust-center/faq" target="_blank">Wix Security Whitepaper</a>, and <a data-composite="true" href="https://support.wix.com/en/article/wix-security-measures-overview" target="">Wix Security Measures Overview</a> to understand our current cybersecurity policies and measures in place to protect our users.</div></div><div data-component-type="text"><div>We are always working to update and improve our products, and your feedback is greatly appreciated.</div></div>

The Digital Operational Resilience Act (DORA) is a European Union regulation aimed at strengthening the digital resilience of the union’s financial sector. It is applicable to entities in scope starti...

Wix and the Digital Operational Resilience Act (DORA)

Discover the key details about the Digital Operational Resilience Act (DORA) and its relevance to Wix services. This article clarifies that DORA applies only to EU financial entities and that Wix does not fall under its compliance requirements. Learn about Wix's role as a non-critical ICT service provider and find out why it cannot sign DORA addendums or templates. Understand how Wix ensures cybersecurity for its users while remaining outside the scope of DORA.

<div data-component-type="text"><div>The Digital Operational Resilience Act (<a data-composite="true" href="https://www.eiopa.europa.eu/digital-operational-resilience-act-dora_en" target="_blank">DORA</a>) is a European Union regulation aimed at strengthening the digital resilience of the union’s financial sector. It is applicable to entities in scope starting January 17, 2025 and ensures that the EU financial sector can withstand, respond to, and recover from Information and Communication Technology (ICT) disruptions, such as cyberattacks or system failures.</div></div><div data-component-type="text"><div>Click on the questions below to learn more about DORA.</div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Does DORA apply to Wix services?</h4><div class="collapsible-content"><div>No. DORA applies only to the EU financial entities as defined in the <a data-composite="true" href="https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng" target="_blank">art. 2 of DORA</a>. Wix.com is not considered to be a financial institution or entity and does not fall in the scope of DORA compliance.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Is Wix a non-critical ICT service provider?</h4><div class="collapsible-content"><div>Wix.com may provide some services that fall under the definition of an ICT service provider clarified in <a data-composite="true" href="https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng" target="_blank">art. 3 of DORA</a>. However, Wix.com does not have an obligation to comply with DORA. Wix users who are in scope to comply with DORA must assess if their use of Wix services is compliant with the regulation.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Are Wix services critical or important under DORA?</h4><div class="collapsible-content"><div>No. Wix.com helps businesses to ensure their online presence, but it does not directly affect core financial services delivered to their own clients. It’s our understanding that disruptions to Wix.com services would not pose a systemic risk to a financial entity. Therefore, Wix services are not critical or important as defined in <a data-composite="true" href="https://eur-lex.europa.eu/eli/reg/2022/2554/oj/eng" target="_blank">art. 3(23) of DORA</a>.</div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Can I sign a DORA addendum with Wix?</h4><div class="collapsible-content"><div>No. Wix.com does not offer a designated DORA addendum to the Wix Terms of Use at this time. Take a look at our <a data-composite="true" href="https://www.wix.com/about/terms-of-use" target="_blank">Wix Terms of Use</a>, <a data-composite="true" href="https://www.wix.com/about/privacy" target="_blank">Wix Privacy Policy</a>, <a data-composite="true" href="https://www.wix.com/trust-center/faq" target="_blank">Wix Security Whitepaper</a>, and <a data-composite="true" href="https://support.wix.com/en/article/wix-security-measures-overview" target="">Wix Security Measures Overview</a> to understand our current cybersecurity policies and measures in place to protect our users.</div><div><br /></div><div>If a DORA addendum through Wix is something you'd like to see in the future, you can <a data-composite="true" href="https://support.wix.com/en/article/request-dora-addendum" target="">vote for that feature</a>. </div></div></div></div><div data-component-type="collapsible"><div><h4 class="collapsible-title">Can Wix sign its customers’ templates to comply with DORA?</h4><div class="collapsible-content"><div>No. Wix is a SaaS provider with millions of users. Wix.com cannot review and sign individually each customer’s template of DORA clauses.</div></div></div></div>

How to begin

Choosing a template

Hiring a professional to build your site

Build your website and business with Wix. Try using our AI tools to create your website, customize templates, or hire professionals to build or enhance your online presence.

Getting started with Wix

Learn how to build your website and business using Wix.

Wix Editor basics

Using the Editor tools

Your site's layout

Strips and columns

Your site's structure

Designing your site

Pages

Menus

Managing pages and menus

Text

Buttons

Containers and boxes

Slideshows

Shapes and lines

Adding and customizing elements

Images

Galleries

Videos

Documents and files

Adding files and media

Working with elements

Using effects and animations

Sharing and promoting your site

Adding advanced elements

Getting started

Mobile tools

Pages on mobile

Background on mobile

Mobile site layout

Site menu on mobile

Text on mobile

Media on mobile

Other elements on mobile

Troubleshooting your mobile site

Building a mobile site

Troubleshooting Editor sites

Using the Wix Editor

Using your dashboard

Managing your site

Managing Roles & Permissions

Getting started with AI

Using AI to create & manage your website

Using AI to set up your business

AI tools

Getting started with the editor

Using the editor tools

Structuring your site

Adding animations and effects

Branding your site

Troubleshooting your site

Using the Wix Harmony Editor

Media Manager basics

Uploading media

Purchasing media

Managing media

Troubleshooting media

Adding & managing media

Using the Pro Gallery

Editing images (Wix Photo Studio)

Getting started with Wixel

Creating and managing projects

Designing with Wixel

Upgrading and account management

Wixel

Managing your media

Wix Multilingual basics

Translating your website

Managing languages

SEO in Wix Multilingual

Creating a multilingual website

Privacy and GDPR

About accessibility

Making your site accessible

Advanced accessibility features

Building an accessible site

About the CMS (Content Management System)

Managing CMS collections

Connecting CMS collection content to your site

Working with dynamic pages and the CMS

Connecting user input elements to CMS

Using CMS with other Wix products

Advanced CMS features

Wix for Developers

Test Site

SSO Login

Wix Blocks

Advanced features

Getting started with  Wix Vibe

Managing your Wix Vibe site

Customizing your Wix Vibe site

Publishing your Wix Vibe site

Using Wix Vibe

Read how to use the Wix Editor and manage content on your site. Discover how to protect your visitors' privacy and make your site accessible.

Creating a website

Design and manage your site with smart functionalities.


Changing your account settings

Sign in issues

Managing your account

Upgrading to a Premium plan

Billing for Premium Plans

Billing for Domains

Billing for Google Workspace Business Emails

Managing your subscriptions

Charges, payments and tax

Invoices for Wix services

Using vouchers and promotions

Billing & premium subscriptions

Review your account settings, manage your subscriptions and plans and understand your invoices.

Account & billing

Manage subscriptions, plans and invoices.

Managing your site with the Wix app

Mobile apps basics

Customizing your own mobile app

Managing your own mobile app

Submitting your mobile app for approval

Building your own mobile app

Customizing your site on the Wix member apps

Managing your site on the Wix member apps

Using mobile apps as a member

Using the Wix member apps

Mobile apps for your customers

Use our mobile apps to run your business efficiently on the go and set up a dedicated app for your site members to stay in touch. 

Using the Wix mobile apps

Run your business and connect with members.