Security Features
Protect your hosting account with SSL certificates, SSH access, and IP blocking.
SSL/TLS Certificates
View Installed Certificates
The SSL section displays all certificates installed on your domains:
- Certificate status (valid/expired)
- Expiration date
- Issuer information
Install SSL Certificate
- Go to SSL/TLS section
- Click Install Certificate
- Choose method:
Option A: Paste Certificate
- Paste your certificate (CRT)
- Paste your private key
- Paste CA bundle (if provided)
- Select domain
- Click Install
Option B: AutoSSL
AutoSSL automatically provisions free SSL certificates from cPanel/Sectigo.
- Click Run AutoSSL
- Wait for certificate provisioning
- Certificate installs automatically
Generate CSR
To purchase an SSL certificate, you need a Certificate Signing Request:
- Click Generate CSR
- Fill in details:
- Domain name
- Organization
- City, State, Country
- Click Generate
- Copy the CSR to send to certificate authority
Private Keys
Manage SSL private keys:
- Generate new keys
- View existing keys
- Delete unused keys
SSH Access
Manage SSH Keys
- Go to SSH Access section
- View existing keys or create new ones
Generate SSH Key
- Click Generate Key
- Configure:
- Key Name: Identifier for the key
- Key Type: RSA or DSA
- Key Size: 2048 or 4096 bits
- Passphrase: Optional password
- Click Generate
Import SSH Key
- Click Import Key
- Paste your public key
- Enter key name
- Click Import
Authorize Key
- Find the key in the list
- Click Authorize
- Key is now active for SSH login
Delete Key
- Find the key
- Click Delete
- Confirm deletion
Connect via SSH
ssh username@server.example.com -p 22
Or with key:
ssh -i ~/.ssh/your_key username@server.example.com
IP Blocker
Block unwanted IP addresses from accessing your website.
Block IP Address
- Go to IP Blocker section
- Enter IP address or range:
- Single IP:
192.168.1.100 - Range:
192.168.1.100-192.168.1.200 - CIDR:
192.168.1.0/24
- Single IP:
- Click Block
Unblock IP
- Find the IP in blocked list
- Click Delete
- IP is now unblocked
Be careful not to block your own IP address or legitimate users.
Hotlink Protection
Prevent other websites from linking directly to your images and files.
Enable Hotlink Protection
- Go to Hotlink Protection
- Toggle Enable ON
- Enter allowed URLs (your domains)
- Select file extensions to protect
- Optionally set redirect URL
- Click Save
Leech Protection
Prevent users from sharing login credentials for protected directories.
Enable Leech Protection
- Go to Leech Protection
- Select directory to protect
- Configure:
- Max Logins: Number of logins per time period
- Time Period: Hours
- Action: Disable account or redirect
- Click Enable
Two-Factor Authentication
Enable 2FA for enhanced cPanel security:
- Go to Two-Factor Authentication
- Scan QR code with authenticator app
- Enter verification code
- Click Enable
Supported apps:
- Google Authenticator
- Authy
- Microsoft Authenticator
ModSecurity
Web Application Firewall (WAF) protection.
View ModSecurity Status
Check if ModSecurity is enabled and view recent blocked requests.
Whitelist Rules
If legitimate requests are being blocked:
- Find the blocked request in logs
- Note the rule ID
- Add rule to whitelist