We look after the server. You look after your logins and your website. These cPanel tools help you protect your account.
In this guide
Strong passwords and two-factor authentication
- Change your cPanel password in Password & Security. Use a long password that you don't use anywhere else.
- Turn on Two-Factor Authentication and scan the code with an authenticator app, such as Google Authenticator or Microsoft Authenticator.
- Use strong, different passwords for each mailbox, FTP account and database user too.
SSL certificates
Check that every name you use, including www and mail, has a valid certificate in SSL/TLS Status, and send all visitors to HTTPS. See How to install and manage SSL certificates and How to force HTTPS on your website.
Password-protect a folder
Directory Privacy puts a username and password on a folder, such as a staging site or an admin area. Choose the folder, tick Password protect this directory, give it a name and add a user.
Block IP addresses
IP Blocker stops an address or a range from reaching your site. Use it for addresses you see attacking your site in your logs, and take care not to block yourself.
Hotlink protection
Hotlink Protection stops other sites from showing your images and files on their pages using your server. Add your own domains, including www, to the allowed list.
Spam filtering
Turn on Spam Filters in cPanel to score incoming mail and move likely spam out of your inbox. To filter mail before it reaches the server, see our email filtering add-on.
If you lock yourself out
- Blocked after failed logins. Wait a while and try again with the right details. Open a ticket and tell us your IP address if you stay blocked.
- Lost your two-factor device. Open a ticket from your account. We'll check it's you before we turn two-factor off.
- Blocked your own IP address. Remove it in IP Blocker from another network, or open a ticket.
Related guides
- How to log in to cPanel
- How to secure your WordPress site
- How to install and manage SSL certificates
Stuck? Open a ticket and a person will reply.
