A short checklist that prevents most security problems we see.
Our servers are patched, monitored and protected by firewalls around the clock. Most security problems we see start with a weak password or out-of-date website software, and those are in your hands. This checklist covers the essentials.
Your logins
- Use a unique password for every login: your client area, HostPanel, each email account, FTP and your website's admin. A password manager makes this easy.
- Turn on two-factor authentication in your client area account settings, and in HostPanel from your profile in the top-right menu. Even if a password leaks, nobody can sign in without the code from your phone.
- Remove what you no longer use: old FTP accounts, database users and email accounts are doors that stay open.
Your website
- Keep everything updated: WordPress or your other website software, plugins and themes. Outdated plugins are the most common way websites are hacked.
- Delete plugins and themes you do not use, rather than only disabling them.
- Use SFTP instead of FTP where your plan allows, because FTP sends passwords unencrypted. See Connecting with SSH or SFTP.
- Turn on the web application firewall for extra protection against common attacks.
Your data
- We back up your account daily, but keep your own copy of anything important too. See Creating your own backup.
- Never store card numbers on your website; use a payment provider that keeps them for you.
Found a security problem in our systems? Please tell us at support@twerple.com. See our Security page for how we handle reports.