Account Security Best Practices

Account Security Best Practices

Keeping your {{COMPANY_NAME}} account secure is essential. Follow these practices to protect your hosting, domains, and billing information.

Strong Passwords

• Use at least 12 characters with a mix of uppercase, lowercase, numbers, and special characters
• Never reuse passwords from other websites or services
• Use a password manager (Bitwarden, 1Password, etc.) to generate and store unique passwords
• Change your password every 3–6 months from My Account → Security → Change Password
• Avoid dictionary words, birthdays, or common patterns like Password123!

Two-Factor Authentication (2FA)

• Enable 2FA from My Account → Security → Two-Factor Authentication
• Use an authenticator app such as Google Authenticator, Authy, or Microsoft Authenticator
• SMS-based 2FA is less secure — authenticator apps are strongly recommended
• Save your backup/recovery codes in a secure offline location
• If you lose your 2FA device, contact {{COMPANY_NAME}} support with identity verification to regain access

Login Safety

• Always verify the URL bar shows your {{COMPANY_NAME}} domain with a valid HTTPS padlock
• Never share your password via email, chat, or phone — {{COMPANY_NAME}} staff will never ask for it
• Log out of your account on shared or public computers
• Review your login history regularly at Security → Login Logs
• Revoke any sessions you do not recognise

Hosting Panel Security

• Use a separate strong password for cPanel/DirectAdmin/Plesk
• Limit FTP/SSH access to known IP addresses where possible
• Remove unused FTP accounts and email accounts promptly
• Keep CMS software (WordPress, Joomla, etc.) updated

If You Suspect Unauthorised Access

1. Change your {{COMPANY_NAME}} account password immediately
2. Change your hosting panel password
3. Enable 2FA if not already active
4. Review your domains, DNS settings, and nameservers for unauthorised changes
5. Check for unknown files or scripts in your hosting account
6. Contact {{COMPANY_NAME}} support at {{SUPPORT_URL}} with details of the suspicious activity

Taking a few minutes to secure your account now can prevent significant issues later.