مكتبة الشروحات

Keeping your hosting account secure starts with proactive habits and smart account management. This article outlines practical tips you can follow to protect your website, data, and account access from common threats.

Use a Strong, Unique Password

Your client area and cPanel passwords should:

• Be at least 12 characters long

• Use a mix of upper/lowercase letters, numbers, and symbols

• Avoid using common words or predictable patterns

Do not reuse the same password across multiple services. Use a trusted password manager if needed.

Enable Two-Factor Authentication (2FA)

Two-Factor Authentication adds a second layer of security by requiring a one-time code in addition to your password.

• Go to My Profile > Security Settings in your client area

• Set up 2FA using an authenticator app like Google Authenticator or Authy

This is one of the most effective ways to prevent unauthorized access.

Review Login Activity Regularly

Check for any unfamiliar IP addresses or locations accessing your account.

• Navigate to My Profile > Login History

• Review recent login attempts and report anything unusual

Protect Your Email Accounts

If you host email through cPanel:

• Use strong passwords for all email accounts

• Avoid forwarding email to untrusted third-party addresses

• Set up SPF, DKIM, and DMARC records for domain email authentication

Compromised email accounts are a common source of phishing and spam.

Keep Your Website Software Updated

Whether you’re running WordPress, Joomla, or a custom site, always keep:

• Core software versions up to date

• Plugins, themes, and extensions updated regularly

• Backups created before updates, just in case

Outdated software is one of the most common ways sites get hacked.

Restrict File Permissions and Directory Access

Use File Manager or FTP to review and adjust permissions:

• Files: 644

• Folders: 755

• Avoid 777 unless absolutely necessary

You can also use Directory Privacy in cPanel to password-protect sensitive areas of your site.

Backup Your Data Regularly

Even with strong security, accidents or compromises can happen. We recommend:

• Downloading full backups from cPanel regularly

• Storing backups in a secure, off-server location

• Verifying backups before relying on them

Some plans include automatic daily backups — check with support if you're unsure.

Be Cautious with Plugins and Uploads

• Only use trusted plugins or scripts from reputable sources

• Avoid installing nulled or pirated software — they often contain malware

• Scan uploads before placing them in public directories

If You Suspect a Compromise

If anything seems suspicious, act fast:

1. Change your password(s)

2. Enable or reset 2FA

3. Scan your website for malware

4. Open a support ticket marked Security Concern