Skip to main content

Security Features

Protect your hosting account with SSL certificates, SSH access, and IP blocking.

SSL/TLS Certificates

View Installed Certificates

The SSL section displays all certificates installed on your domains:

  • Certificate status (valid/expired)
  • Expiration date
  • Issuer information

Install SSL Certificate

  1. Go to SSL/TLS section
  2. Click Install Certificate
  3. Choose method:

Option A: Paste Certificate

  1. Paste your certificate (CRT)
  2. Paste your private key
  3. Paste CA bundle (if provided)
  4. Select domain
  5. Click Install

Option B: AutoSSL

AutoSSL automatically provisions free SSL certificates from cPanel/Sectigo.

  1. Click Run AutoSSL
  2. Wait for certificate provisioning
  3. Certificate installs automatically

Generate CSR

To purchase an SSL certificate, you need a Certificate Signing Request:

  1. Click Generate CSR
  2. Fill in details:
    • Domain name
    • Organization
    • City, State, Country
    • Email
  3. Click Generate
  4. Copy the CSR to send to certificate authority

Private Keys

Manage SSL private keys:

  • Generate new keys
  • View existing keys
  • Delete unused keys

SSH Access

Manage SSH Keys

  1. Go to SSH Access section
  2. View existing keys or create new ones

Generate SSH Key

  1. Click Generate Key
  2. Configure:
    • Key Name: Identifier for the key
    • Key Type: RSA or DSA
    • Key Size: 2048 or 4096 bits
    • Passphrase: Optional password
  3. Click Generate

Import SSH Key

  1. Click Import Key
  2. Paste your public key
  3. Enter key name
  4. Click Import

Authorize Key

  1. Find the key in the list
  2. Click Authorize
  3. Key is now active for SSH login

Delete Key

  1. Find the key
  2. Click Delete
  3. Confirm deletion

Connect via SSH

ssh username@server.example.com -p 22

Or with key:

ssh -i ~/.ssh/your_key username@server.example.com

IP Blocker

Block unwanted IP addresses from accessing your website.

Block IP Address

  1. Go to IP Blocker section
  2. Enter IP address or range:
    • Single IP: 192.168.1.100
    • Range: 192.168.1.100-192.168.1.200
    • CIDR: 192.168.1.0/24
  3. Click Block

Unblock IP

  1. Find the IP in blocked list
  2. Click Delete
  3. IP is now unblocked
warning

Be careful not to block your own IP address or legitimate users.

Prevent other websites from linking directly to your images and files.

  1. Go to Hotlink Protection
  2. Toggle Enable ON
  3. Enter allowed URLs (your domains)
  4. Select file extensions to protect
  5. Optionally set redirect URL
  6. Click Save

Leech Protection

Prevent users from sharing login credentials for protected directories.

Enable Leech Protection

  1. Go to Leech Protection
  2. Select directory to protect
  3. Configure:
    • Max Logins: Number of logins per time period
    • Time Period: Hours
    • Action: Disable account or redirect
  4. Click Enable

Two-Factor Authentication

Enable 2FA for enhanced cPanel security:

  1. Go to Two-Factor Authentication
  2. Scan QR code with authenticator app
  3. Enter verification code
  4. Click Enable

Supported apps:

  • Google Authenticator
  • Authy
  • Microsoft Authenticator

ModSecurity

Web Application Firewall (WAF) protection.

View ModSecurity Status

Check if ModSecurity is enabled and view recent blocked requests.

Whitelist Rules

If legitimate requests are being blocked:

  1. Find the blocked request in logs
  2. Note the rule ID
  3. Add rule to whitelist