IMPORTANT UPDATE: Security Updates May Be Required For Your Website

At Ember Marketing Co. we work hard to ensure our clients’ sites are built with the latest security features in mind. If your site is hosted with us, we offer up to 3 layers of security to ensure your website is not vulnerable to hacks, malware or other attacks.

Many agencies like us use a tool called ACF Pro which allows us to build many of the customizations that we do. The developers of this tool recently released an update related to a vulnerability that was discovered in their code.

What does this mean for you?

A vulnerability doesn’t necessarily mean there is an immediate issue, it only means that in some cases hackers have found a weakness in the code that they were able to exploit. That being said, we will be working to update all of our active client websites to ensure this issue is addressed.

How will this affect our clients?

In most cases, most of our clients won’t even notice the update. This is a simple plugin update along with some changes in our own code that we will complete FREE OF CHARGE for any clients hosting with us. For clients hosting with a third party, additional costs may apply depending on the time it takes to update your website. In many cases we will also complete this service free of charge. This will be determined on a case-by-case basis.

As we have a large number of client websites, we will be focusing on the most high-traffic/most vulnerable websites first and working our way through our client list. We expect to have all updates for hosted clients completed by the end of January.

If you have any questions, please don’t hesitate to reach out to your point of contact.

Important Google Workspace Update!

Are you getting error messages when sending emails from your Google Workspace account? Google has recently implemented an extra security measure (DKIM) that needs to be added to your domain’s DNS settings.

 

What is DKIM?

DKIM or Domain Keys Identified Mail is an email authentication feature that provides confirmation to the sender’s account that your email is coming from a legitimate source. Google is specifically requiring this now for anyone using their own domain with Google Workspace accounts (and potentially other accounts).

 

How can I tell if I’m using a Google Workspace account?

Unsure if you fall into this category? You likely have a Google Workspace account if you meet the following requirements:

  1. Your email address ends with your website URL (e.g. hello@embermarketing.co)
  2. You can access your email accounts the same way you would access a gmail account (via mail.google.com)

 

What can I do about this?

Luckily there is a fairly quick fix! You and/or your web developer will need the following:

  • Access to your Google Workspace Admin account (as a superadmin – if you created this account yourself, you already have full access)
  • Access to your domain’s DNS Records. Note: if your website is hosted under a different account than your domain, your DNS records will likely need to be changed under your host’s settings

 

Step One: Enable DKIM in Google Workspace

  1. Log into your Google Workspace account
  2. Once you have accessed your Admin Console, navigate to Apps > Google Workspace > Gmail
  3. Click Authenticate Email and ensure that DKIM Authentication is ON
  4. Select the correct domain from the dropdown (if applicable)
  5. Save the information in the grey box

Step Two: Add TXT record to your domain/host
Note: Please only do this if you have experience working with DNS records and know what you are doing. Otherwise contact us and we can do this step for you.

  1. Navigate to your domain’s DNS records either in your domain registrar or hosting account.
  2. Create a new TXT record.
  3. Add “google._domainkey” under Name field
  4. Add the rest of the key (v=DKIM1….) in the Value field. Additional settings can likely stay on their defaults
  5. Save the record

That’s it! Note that any DNS changes can take up to 48 hours to propogate (take effect).

 

Want professional support?

We’re happy to help! Get in touch