Web Hosting: Security (Account, cPanel, Email)

There are security features automatically enabled on accounts, and also some you can choose to utilize to make things more secure. Below we will summarize and link to different aspects of your web hosting account security, including account security at mywebhostingaccount.com, cPanel security features, and email security.

MyWebHostingAccount.com Account Security

To keep your account and login secure on mywebhostingaccount.com, you can make sure there is a strong password (help article: Change mywebhostingaccount.com Password). You can also enable two-factor authentication (help article: Add Two-Factor Authentication), and add an account security question (help article: Add More Account Security Measures).

More info on all of these security measures can be found here: mywebhostingaccount.com: Add More Account Security Measures.

cPanel Security

Please make sure your cPanel has a strong password. How to change cPanel password here: Change cPanel Password

cPanel has built-in security features, some of which run automatically in the background, and some can be manually configured. A2 Hosting, which is where our servers are hosted, has a list of cPanel security features, and separate articles with more info on them here: a2hosting.com/kb/cpanel/cpanel-security-features

Some of the cPanel security features include:

• Free unlimited SSL certificates
• IP Blocker
• Password-protected file directories
• Leech protection for the password-protected file directories
• Hotlink Protection
• Two-factor authentication for cPanel
• Imunify360: Multi-layered, comprehensive security suite that combines an Intrusion Prevention and Detection system, a Web Application Firewall, Real-time Antivirus protection, a Network Firewall, and Patch Management components. Imunify360 is capable of defending against port scans, brute force attacks, DoS attacks, and more. Imunify360 protects the entire server environment including the database which is locally hosted on the server. Imunify360 runs automatically and is not configurable from cPanel, but runs on an already-established rule-set.
• ModSecurity: Web application firewall (WAF) that protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help determine what traffic is malicious and what traffic is safe. ModSecurity runs automatically and is not configurable from cPanel, but runs on an already-established rule-set. 

In addition to the above-listed security features, you can also block web traffic from specific countries by adding IP address ranges to the .htaccess file. Steps on how to do this can be found in this HelpDesk article: Web Hosting: Geo Blocking / Block or Allow Website Access From Specific Countries. If using WordPress, you can also utilize a country-blocking plugin like IP2Location Country Blocker (https://wordpress.org/plugins/ip2location-country-blocker/).

In order to restore lost or corrupted files and databases, cPanel features a free, automatic "Server Rewind" backup feature, where the website files and databases are automatically backed up daily and saved off-server. Each weekday backup is kept for 7 days, and each Sunday is kept for a month. HelpDesk article: Automatic "Server Rewind" Backups in cPanel

Email Security

For email security, you can make sure your password is strong. How to change email address password can be found here: Change Email Address Password / Manage Email Address in cPanel 

There are also tools to protect against email spoofing, which is where spammers and scammers will forge and falsify the email sending address to make it look like it came from a certain email address, when it really did not. More info about anti-spoofing tools can be found here: Protect Against Email Spoofing in cPanel (Added Email Security)