15 Simple Ways to Keep Your Server Secure

A server is a computer that stays on and serves your website. Root is the all-powerful admin user on it. VPS and dedicated server owners have root. Shared hosting users can follow the account-level tips.

The 15 practices

1. Use strong passwords. Make them long, with letters, numbers and symbols. Never reuse them.
2. Keep software updated. Updates fix known holes. This covers the OS, control panel and apps.
3. Use a firewall. A firewall is a guard that blocks unwanted traffic. Allow only the ports you need.
4. Use SSH keys. SSH is how you control a server by commands. A key is a long secret file that is safer than a password.
5. Turn off direct root login. Use a normal user, then gain admin power when needed.
6. Change the default SSH port. This reduces random attacks.
7. Limit login attempts. Tools such as Fail2ban block an address after many wrong tries.
8. Remove unused software. Less software means fewer weak points.
9. Close unused ports. A port is a numbered door on the server. Close what you do not use.
10. Use SSL. SSL encrypts the data between visitors and your site.
11. Take regular backups. Keep a copy away from the server. Test that you can restore it.
12. Scan for malware. Run scans on a schedule.
13. Check logs. Logs are diaries of what happened. Odd entries can show an attack.
14. Give users only the access they need. Remove accounts that are no longer in use.
15. Turn on two-factor login. It asks for a code from your phone as well as a password.

Steps to start today

1. Change your main passwords.
2. Install pending updates.
3. Check your firewall rules.
4. Set up a backup that runs by itself.

Ask Hostvento support which security tools are on your plan. You can open a ticket any time.

Quick recap

• Strong passwords and updates come first.
• Use a firewall and block repeated bad logins.
• Prefer SSH keys, and avoid direct root login.
• Back up often and test restores.
• Watch your logs and remove unused access.