Protecting your hosting account is important because it may provide access to websites, files, databases, email accounts and other services.

Use a strong and unique password

Use a password that is difficult to guess and is not used for any other service.

Do not share your hosting or control panel password with unauthorized users.

Enable two-factor authentication

If two-factor authentication is available for your account, enabling it can provide an additional layer of security.

Protect your email account

Your email address may be used for password resets and important account notifications.

Make sure the email account associated with your hosting service is also protected with a strong password and additional security where available.

Keep contact information current

Keep your account email address and contact information up to date so you can receive important security and service notifications.

Review account access

Regularly review:

- Administrator users
- FTP or SFTP accounts
- Email accounts
- Application users
- Database users
- API credentials
- Other access credentials

Remove access that is no longer required.

Use secure connections

Use encrypted connections where supported, including:

- HTTPS
- SFTP
- SSH
- SSL/TLS email connections

Avoid sending passwords through insecure channels.

Keep websites updated

A hosting account can still be compromised through vulnerable website software.

Keep applications, plugins, themes and other software updated.

Maintain backups

Keep regular backups of important website files and databases.

Where possible, maintain an additional backup copy outside the hosting account.

Be careful with suspicious messages

Do not enter your account credentials into links from unexpected emails or messages.

Always verify that you are accessing the correct website before entering login information.

If you suspect unauthorized access

If you believe someone has accessed your hosting account without permission:

1. Change your account password immediately.

2. Change other important passwords associated with the service.

3. Review website files and user accounts.

4. Check for unexpected changes.

5. Contact support if you need assistance investigating the issue.

Need assistance?

If you believe your hosting account has been compromised or need help improving account security, please contact our support team.