How to Keep Your Hosting Account Secure

Overview

Your hosting account gives you access to your website, email, files, databases, and other services.

Keeping that account secure is an important part of keeping your website secure.

Fortunately, you don't need to be a security expert to follow a few basic practices that can significantly reduce the risk of problems.

Use Strong, Unique Passwords

Use strong passwords for your important accounts, including:

• Have Freedom Hosting Customer Portal

• cPanel

• Email accounts

• WordPress administrator accounts

• Domain registrar accounts

• Other services connected to your website

Avoid using the same password for multiple services.

If one service is compromised, a reused password could potentially give someone access to your other accounts.

A password manager can make it much easier to keep track of strong, unique passwords.

Don't Share Your Passwords

Never send your passwords through:

• Support tickets

• Email

• Discord or other chat services

• Social media

• Screenshots

• Other unsecured communications

Have Freedom Hosting Support should not need your password to troubleshoot most hosting problems.

If someone needs access to your website or hosting account, use an appropriate user or access-management method instead of giving them your personal credentials whenever possible.

Protect Your Customer Portal Account

Your Customer Portal provides access to important information about your Have Freedom Hosting account.

Treat it as an important account and protect it accordingly.

Make sure the email address associated with your account is also secure.

If someone gains access to your email account, they may be able to reset passwords for other services.

Keep WordPress and Other Applications Updated

If you're using WordPress or another web application, keep it updated.

This includes:

• The application itself

• Plugins

• Themes

• Extensions

• Other software installed on your hosting account

Updates often include security fixes as well as improvements and bug fixes.

If you're no longer using a plugin, theme, or application, consider removing it rather than leaving unused software installed.

Be Careful With Plugins and Applications

Only install software from sources you trust.

Avoid downloading:

• Pirated software

• "Cracked" plugins or themes

• Unknown scripts

• Modified versions of legitimate applications

• Software from suspicious websites

Free doesn't always mean safe.

A compromised plugin or script can create problems for your website even when your hosting account itself is secure.

Keep Your Computer Secure

Your hosting account isn't the only thing that needs protection.

If your computer is infected with malware or someone gains access to your computer, they may be able to steal saved passwords or other credentials.

Keep your computer and browser updated and use reputable security software.

Be particularly careful when downloading files or opening unexpected attachments.

Be Careful With Email

Many account compromises begin with phishing.

Be cautious of messages asking you to:

• Confirm your password

• Log into your account

• Download an unexpected file

• Make an urgent payment

• Verify personal information

• Click an unfamiliar link

If you're unsure whether a message is legitimate, don't use the link in the message.

Instead, open the service's website directly through your normal browser.

Use HTTPS

Whenever you're managing a website or entering sensitive information, make sure you're using a secure HTTPS connection.

For example:

https://example.com

Your website should also use HTTPS for normal visitor traffic.

If your website displays a security warning or doesn't appear to be using HTTPS correctly, address the issue rather than telling visitors to ignore the warning.

Keep Backups

Security isn't only about preventing problems.

You should also have a way to recover if something goes wrong.

Maintain backups of important website content and other data you cannot afford to lose.

This is particularly important before:

• Major website changes

• Application updates

• Plugin or theme changes

• Website migrations

• Large file changes

A backup is most useful when you know you can actually restore from it.

Review Your Website Users

If your website uses an application such as WordPress, periodically review the accounts that have access to it.

Remove accounts that are no longer needed.

Make sure administrator-level access is only given to people who actually require it.

Avoid sharing one administrator account among multiple people when individual accounts are available.

Don't Ignore Security Warnings

If your browser, WordPress installation, cPanel, or another service reports a security problem, don't simply dismiss it.

A warning could indicate:

• An outdated application

• An invalid SSL certificate

• A compromised account

• A configuration problem

• Suspicious website activity

If you don't understand the warning, that's okay. Take note of the message and ask for help.

What Have Freedom Hosting Can Help With

Have Freedom Hosting can assist with issues related to your hosting environment and help you understand hosting-related problems.

However, website security is a shared responsibility.

For example, if a WordPress plugin introduces a vulnerability, the plugin itself may need to be updated or removed.

Similarly, if someone obtains your personal password through a phishing attack, changing the affected password and securing the account will be necessary.

Keeping your website software, devices, passwords, and accounts secure is an important part of protecting your website.

If You Think Your Account Has Been Compromised

If you believe someone has gained unauthorized access to your hosting account, website, or email, act quickly.

Depending on the situation, you may need to:

1. Change affected passwords.

2. Secure your email account.

3. Review your website users.

4. Check for unfamiliar files or changes.

5. Review recent account activity where available.

6. Remove compromised or suspicious software.

7. Contact Have Freedom Hosting Support.

When contacting support, explain what you noticed and when you noticed it.

Do not send your passwords to support.

A Few Simple Rules

If you only remember a few things, remember these:

• Use strong, unique passwords.

• Keep your software updated.

• Don't share your passwords.

• Don't install software from untrusted sources.

• Keep backups.

• Be cautious with unexpected emails and links.

• Use HTTPS.

• Remove accounts and software you no longer need.

• Ask for help when something looks suspicious.

A few good habits go a long way toward keeping your hosting account and website in good shape.