---
schema_version: "1"
id: f1e09021081e8a161d7b650d11ff68a5250f78be29363109a1c57b47f79f5fa2
title: Apply Defense in Depth
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_apply_defense_in_depth.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_apply_defense_in_depth.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a16653f1951783e2f01e7626079163f152f446c84bf7cdcac18696410a9ca8b3
description: Defense in depth means using multiple layers of security within your B2C Commerce environment instead of just one. If an attack causes one security mechanism to fail, other mechanisms can still provide the necessary security to protect the system. Think of creating a security onion and not a security egg. When dropped, an egg smashes everywhere, while an onion just gets a little bruised because it has multiple layers.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Apply Defense in Depth

Defense in depth means using multiple layers of security within your B2C Commerce environment instead of just one. If an attack causes one security mechanism to fail, other mechanisms can still provide the necessary security to protect the system. Think of creating a security onion and not a security egg. When dropped, an egg smashes everywhere, while an onion just gets a little bruised because it has multiple layers.

Here are some best practices when applying defense in depth.

- Implement 2FA so a stolen password can’t compromise a user account. Using Account Manager to configure authentication enables customers to enforce 2FA on all their users, thereby implementing defense in depth.
- Add authentication mechanisms to internal systems in case an attacker manages to get inside the firewall.