Website malware can affect files, databases, visitors and the reputation of your website.
There is no single security measure that prevents every attack, so website security should use several layers of protection.
Keep software updated
Keep your website software up to date, including:
- Content management systems
- Plugins
- Themes
- Extensions
- Custom applications
- Server-side software where applicable
Outdated software can contain known security vulnerabilities.
Remove unused software
Delete plugins, themes, applications and files that are no longer required.
Unused software can still create security risks if it remains accessible on the server.
Use strong passwords
Use strong and unique passwords for:
- Hosting accounts
- cPanel
- Website administrators
- FTP or SFTP accounts
- Databases
- Email accounts
Do not share passwords with unauthorized users.
Use trusted software
Install themes, plugins and applications only from trusted sources.
Avoid pirated, modified or unknown software packages.
Keep regular backups
Maintain current backups of your website files and databases.
Where possible, keep an additional backup copy in a separate secure location.
Restrict access
Only provide administrative access to users who genuinely need it.
Remove old user accounts and review administrator permissions periodically.
Monitor your website
Watch for unusual behavior such as:
- Unexpected redirects
- Unknown files
- New administrator accounts
- Suspicious code
- Spam pages
- Unexpected changes to website content
- Browser security warnings
If malware is detected
If you suspect your website is infected:
1. Avoid making unnecessary changes before identifying the problem.
2. Change important account passwords.
3. Review website files and administrator accounts.
4. Update vulnerable software.
5. Remove malicious files or restore from a known clean backup where appropriate.
6. Continue monitoring the website after cleanup.
Important
Restoring a backup without fixing the original security weakness may allow the website to become infected again.
Need assistance?
If you believe your website has been compromised or infected with malware, please contact our support team with the affected domain and any error messages or suspicious behavior you have noticed.
