---
schema_version: "1"
id: 7763db93848126630de5555d3d29dd68c6637f877b1b23e1c7aa88d772c2b2e4
title: Use Secure Defaults
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_use_secure_defaults.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_use_secure_defaults.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b7d48769b89beb515bb8552fa4d3012c11670b386e25a91470fc8c6b343d041f
description: As an administrator, you want to make the B2C Commerce user experience secure and reduce the number of default security settings. Configure security settings so that users must opt out of default security settings rather than opt in. If there's a security risk, clearly label insecure functionality in APIs or the user interface to discourage use.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Use Secure Defaults

As an administrator, you want to make the B2C Commerce user experience secure and reduce the number of default security settings. Configure security settings so that users must opt out of default security settings rather than opt in. If there's a security risk, clearly label insecure functionality in APIs or the user interface to discourage use.

Here are some examples.

- Call a function "dangerousInlineHTML". Don't call it "inlineHTML".
- Business Manager enforces security questions for password reset by default. Always keep this setting enabled, but customers can choose to disable it if their business demands it.