Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

Basic Security Tips for Your Shared Hosting Account

A few simple habits keep your website safe from most attacks. This guide lists the easiest ones.

Domains and DNS2 min read14 steps1 screenshots

What is shared hosting?

Shared hosting means many websites live on one server. It is like living in an apartment building. The building has shared walls, so you should lock your own door well.

shared hosting, shared hosting security

Tips you can follow today

  1. Use strong passwords. Use at least 12 characters. Mix letters, numbers and symbols. Do not reuse the same password on other sites. A password manager can remember them for you.
  2. Change passwords now and then. Do it for your client area, cPanel, FTP, email and database users.
  3. Keep software updated. Update WordPress, themes, plugins and any other app. Old versions have known holes that attackers use.
  4. Delete what you do not use. Remove old plugins, themes and test sites. Each one is a possible way in.
  5. Use only trusted plugins and themes. Download them from the official source. Avoid pirated copies, which often hide bad code.
  6. Use SSL. SSL puts a padlock on your site and hides the data between visitor and server. Check with Hostvento support how to turn it on for your plan.
  7. Use secure file transfer. Choose SFTP instead of plain FTP when your plan allows it. Plain FTP sends your password in the open.
  8. Set safe file permissions. Folders are usually 755 and files are usually 644. Avoid 777, which lets anyone write to the file.
  9. Take regular backups. Keep a copy away from the server too. A backup is your undo button after a hack.
  10. Turn on two-step login where it is offered. It asks for a code from your phone as well as your password.
  11. Scan your computer. A virus on your own computer can steal your hosting passwords.
Tip: Do not log in to your client area from public Wi-Fi unless you use a VPN. A VPN hides your traffic from others on the same network.

If you think you were hacked

  1. Change all your passwords at once.
  2. Restore a clean backup if you have one.
  3. Open a support ticket and explain what you saw.

Quick recap

  • Use strong, different passwords.
  • Update everything and delete unused items.
  • Use SSL, SFTP and safe file permissions.
  • Back up often.
  • Ask support if something looks wrong.