Use only the public Storefront token
Never paste a private Admin API credential into Fy2Press. The public Storefront token is used for catalog and cart requests. WordPress administrators who can manage Fy2Press should be limited to trusted users.
Fy2Press · Security and data
Security and data
Use the public Storefront token, restrict administrative access and keep commerce and customer data in their authoritative systems.
System responsibility
Shopify remains responsible for products, inventory, the cart service, transactions and checkout; WordPress can display the cart interface. WordPress stores the synchronized publishing records. Fy2Press connects and renders them through its display templates, blocks and shortcodes.
Current security boundary
Use a Fy2Press package obtained from an authorized source. Keep license keys, test credentials and backups outside the public web root.