{"id":55485,"date":"2020-04-20T14:25:00","date_gmt":"2020-04-20T19:25:00","guid":{"rendered":"https:\/\/blog.cpanel.com\/?p=55485"},"modified":"2020-04-20T14:25:00","modified_gmt":"2020-04-20T19:25:00","slug":"intro-to-server-security","status":"publish","type":"post","link":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/","title":{"rendered":"Securing Your cPanel: Intro to Server Security"},"content":{"rendered":"\n<p>Securing your server is one of the most important things you need to&nbsp;do when you&#8217;re setting up your cPanel for the first time. There are multiple steps you should take to be proactive about protecting your server.&nbsp; &nbsp;Most people understand the need to protect their website from vulnerabilities, but don&#8217;t realize their hosting server needs protection, too. When hackers discover they can&#8217;t get directly into your website, they&#8217;ll try to break in through your cPanel account.&nbsp;<\/p>\n\n\n\n<p>In this article, you&#8217;ll learn basic best practices for safeguarding your site, server, and account from hackers.&nbsp;We&#8217;ll introduce security topics like:&nbsp;<\/p>\n\n\n\n<ul><li>Configuring cPanel Security Advisor<\/li><li>Using Strong Passwords and Unique Usernames<\/li><li>Using Web and Email Security Tools<\/li><li>Limiting Access by IP Address<\/li><li>Preventing Brute Force Attacks with cPHulk<\/li><li>AND How to Stay Updated and Actively Monitor Your System&nbsp;<\/li><\/ul>\n\n\n\n<p>We&#8217;ve got a lot of information to cover, so let&#8217;s get started!&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-IntroducingSecurityAdvisor\"><strong>Introducing Security Advisor<\/strong><\/h2>\n\n\n\n<p>Security Advisor is a feature that collects all plausible security concerns on your server for you to review. You&#8217;ll find the&nbsp;<a href=\"https:\/\/docs.cpanel.net\/whm\/security-center\/security-advisor\/84\/\">Security Advisor&nbsp;in the&nbsp;<\/a><a href=\"https:\/\/docs.cpanel.net\/whm\/security-center\/\">Security Center<\/a>&nbsp;section of your cPanel.&nbsp;&nbsp;As a hosting provider, you&#8217;ll want to address these as soon as possible. When you select each item, the interface provides warnings and possible solutions. When you choose it from the left-hand menu in WHM, the Security Advisor interface displays services that have been installed, password strengths, and other settings, along with a colored status coded green, yellow, or grey. This status provides a notification to inform users about probable security issues that need addressing.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.cpanel.com\/wp-content\/uploads\/2020\/04\/Security-Advisor.png\" alt=\"\" class=\"wp-image-55493\"\/><\/figure>\n\n\n\n<p>The color-coding of the messages in the Security Advisor indicates the severity of the possible issue. Red advisories indicate a severe security issue, and we recommend addressing them with a high priority. Yellow warnings show potential problems that require investigation and resolution sooner rather than later, and grey advisories provide an informational notice of a permissions issue on the server. Green advisories are generally trivial issues and don&#8217;t require immediate attention.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-HowtoConfigureSecurityAdvisorNotifications\"><strong>How to Configure Security Advisor Notifications<\/strong><\/h2>\n\n\n\n<p>When you open&nbsp;<a href=\"https:\/\/docs.cpanel.net\/whm\/server-contacts\/contact-manager\/88\/\">Contact Manager<\/a>&nbsp;in WHM (WHM &gt;&gt; Home &gt;&gt; Server Contacts &gt;&gt; Contact Manager), you can specify when and where the server sends notifications. You&#8217;ll find your Security Advisor notification controls here, along with other alerts that you can configure to send notifications multiple ways. You can set the level of importance of these notifications to low, medium, or high, depending on your preference.<\/p>\n\n\n\n<figure class=\"wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"WHM Tutorials - Contact Manager\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/P7ZF4guMBg8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-UniquePasswordsandUsernames\"><strong>Unique Passwords and Usernames<\/strong><\/h2>\n\n\n\n<p>Another&nbsp;easy thing to do is remember to use usernames that aren&#8217;t easy to guess when setting up your accounts. But what makes a good username? Stay away from obvious choices, like your first or last name, or admin.&nbsp; Try using a combination of upper and lowercase letters in places they wouldn&#8217;t normally be. Add a number or symbol to the username.&nbsp; The idea is to make it something that is harder for a hacker to guess based on your publicly available personal information.<\/p>\n\n\n\n<p>As far as passwords go, you want to use a strong and unique password for all accounts, including your system&#8217;s root user, the MySQL root user and any other system accounts in addition to your personal accounts. Many of the same standards recommended for creating a unique username can be applied when choosing a password, but some experts recommend choosing a random string of 5 words, as shown in&nbsp;<a href=\"https:\/\/xkcd.com\/936\/\">this charming XKCD comic.&nbsp;<\/a><\/p>\n\n\n\n<p>You may want to invest in a password manager to help you keep track of all these unique usernames and passwords.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-WebandEmailSecurity\"><strong>Web and Email Security<\/strong><\/h2>\n\n\n\n<p>Securing the Web and Email on a cPanel server is just as important as the other server related options. Here are some links to related documentation about these types of security for your servers.&nbsp;<\/p>\n\n\n\n<ol><li><a href=\"https:\/\/docs.cpanel.net\/knowledge-base\/security\/tips-to-make-your-server-more-secure\/,\">Web Security&nbsp;<\/a>&#8211; pay special attention to&nbsp;&nbsp;<a href=\"https:\/\/docs.cpanel.net\/whm\/security-center\/modsecurity-tools\/82\/\">ModSecurity&#x2122; Tools<\/a>, as you will need to install rules for your server here.&nbsp;<\/li><li><a href=\"https:\/\/docs.cpanel.net\/knowledge-base\/email\/how-to-prevent-email-abuse\/\">Email Security<\/a>&nbsp;&#8211; these tips will help prevent email abuse from happening on your server.&nbsp;<\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-LimitAccessbyIPAddress\"><strong>Limit Access by IP Address<\/strong><\/h2>\n\n\n\n<p>To protect your server assets and prevent unauthorized access, which lowers the risk of attack, it often makes sense to limit user connections to a specific IP address or range of addresses. You can allow only specific IP addresses to access services on the server using WHM&#8217;s&nbsp;<a href=\"https:\/\/docs.cpanel.net\/whm\/security-center\/host-access-control\/82\/\">Host Access Control<\/a>&nbsp;interface (WHM &gt;&gt; Home &gt;&gt; Security Center &gt;&gt; Host Access Control.)<\/p>\n\n\n\n<p>These services include<\/p>\n\n\n\n<ul><li>POP3 (pop3)<\/li><li>Webmail (webmaild)<\/li><li>Web Disk (cpdavd)<\/li><li>FTP (ftpd)<\/li><li>cPanel (cpaneld)<\/li><li>SSH (sshd)<\/li><li>IMAP (imap)<\/li><li>SMTP (smtp)<\/li><li>WHM (whostmgrd)<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-cPHulkBruteForceProtection\"><strong>cPHulk Brute Force Protection<\/strong><\/h2>\n\n\n\n<p>cPanel also offers a service called cPHulk Brute Force Protection. A brute force attack uses automated systems to try to guess the passwords on your system. It also includes some IP management tools as part of the software. cPHulk also makes it possible to block specific countries from logging in to your server. It&#8217;s a very robust package. You can learn more about&nbsp;<a href=\"https:\/\/docs.cpanel.net\/whm\/security-center\/cphulk-brute-force-protection\/82\/\">cPHulk in our documentation<\/a>.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-StayUpdated\"><strong>Stay Updated<\/strong><\/h2>\n\n\n\n<p>Security experts highly recommend that you use only the latest stable versions of any software on a server that is live and in production. Staying updated ensures that your software has all the latest patches and security fixes. You should check for updates often, at least weekly.<\/p>\n\n\n\n<figure class=\"wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"WHM Tutorials - How to Update Your Server\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/YcWzAMCwVQQ?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"BlogPost:SecuringYourcPanel:IntrotoServerSecurity-InConclusion\"><strong>In Conclusion<\/strong><\/h2>\n\n\n\n<p>Server security is one of the most important parts of owning a web server. It&#8217;s as essential as network security, and in some ways more important, because servers often contain a great deal of vital information. If your server is compromised, crackers can not only cause damage to the way the site is displayed; they can steal data as all of the server&#8217;s contents may become available for them to use at will. If you find that all of this seems overwhelming, you can always hire a&nbsp;<a href=\"https:\/\/university.cpanel.net\/safeadmin-accreditation\">SafeAdmin Accredited<\/a>&nbsp;System Administrator who knows what the best practices for protecting your server are.&nbsp;&nbsp;<a href=\"https:\/\/forums.cpanel.net\/resources\/categories\/system-administration-services.1\/\">A list of currently certified SafeAdmin Sysadmins is available on the cPanel Forums.<\/a><\/p>\n\n\n\n<p>As always, if you have any feedback or comments, please let us know. We are here to help in the best ways we can. You&#8217;ll find us on&nbsp;<a href=\"https:\/\/go.cpanel.net\/discord\">Discord,<\/a>&nbsp;the&nbsp;<a href=\"https:\/\/forums.cpanel.net\/\">cPanel forums<\/a>, and&nbsp;<a href=\"https:\/\/www.reddit.com\/r\/cpanel\/\">Reddit<\/a>.&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Securing your server is one of the most important things you need to&nbsp;do when you&#8217;re setting up your cPanel for the first time. There are multiple steps you should take to be proactive about protecting your server.&nbsp; &nbsp;Most people understand the need to protect their website from vulnerabilities, but don&#8217;t realize their hosting server needs [&hellip;]<\/p>\n","protected":false},"author":85,"featured_media":65357,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[49],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Securing Your cPanel: Intro to Server Security | cPanel<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Securing Your cPanel: Intro to Server Security | cPanel\" \/>\n<meta property=\"og:description\" content=\"Securing your server is one of the most important things you need to&nbsp;do when you&#8217;re setting up your cPanel for the first time. There are multiple steps you should take to be proactive about protecting your server.&nbsp; &nbsp;Most people understand the need to protect their website from vulnerabilities, but don&#8217;t realize their hosting server needs [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/\" \/>\n<meta property=\"og:site_name\" content=\"cPanel\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cpanel\/\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-20T19:25:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/devel.www.cpanel.net\/wp-content\/uploads\/2020\/04\/Secure_Blog-headerP1.gif\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"474\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/gif\" \/>\n<meta name=\"author\" content=\"Tabby Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cPanel\" \/>\n<meta name=\"twitter:site\" content=\"@cPanel\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tabby Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/\",\"url\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/\",\"name\":\"Securing Your cPanel: Intro to Server Security | cPanel\",\"isPartOf\":{\"@id\":\"https:\/\/devel.www.cpanel.net\/#website\"},\"datePublished\":\"2020-04-20T19:25:00+00:00\",\"dateModified\":\"2020-04-20T19:25:00+00:00\",\"author\":{\"@id\":\"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/937065f5d955e1a72a1abd851bbb5a0c\"},\"breadcrumb\":{\"@id\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/devel.www.cpanel.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Securing Your cPanel: Intro to Server Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/devel.www.cpanel.net\/#website\",\"url\":\"https:\/\/devel.www.cpanel.net\/\",\"name\":\"cPanel\",\"description\":\"Hosting Platform of Choices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/devel.www.cpanel.net\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/937065f5d955e1a72a1abd851bbb5a0c\",\"name\":\"Tabby Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4391b167db175ebbd14ebfc95ba54f1f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4391b167db175ebbd14ebfc95ba54f1f?s=96&d=mm&r=g\",\"caption\":\"Tabby Worthington\"},\"sameAs\":[\"https:\/\/cpanel.net\/blog\/\"],\"url\":\"https:\/\/devel.www.cpanel.net\/blog\/author\/cptabby\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Securing Your cPanel: Intro to Server Security | cPanel","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/","og_locale":"en_US","og_type":"article","og_title":"Securing Your cPanel: Intro to Server Security | cPanel","og_description":"Securing your server is one of the most important things you need to&nbsp;do when you&#8217;re setting up your cPanel for the first time. There are multiple steps you should take to be proactive about protecting your server.&nbsp; &nbsp;Most people understand the need to protect their website from vulnerabilities, but don&#8217;t realize their hosting server needs [&hellip;]","og_url":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/","og_site_name":"cPanel","article_publisher":"https:\/\/www.facebook.com\/cpanel\/","article_published_time":"2020-04-20T19:25:00+00:00","og_image":[{"width":1200,"height":474,"url":"https:\/\/devel.www.cpanel.net\/wp-content\/uploads\/2020\/04\/Secure_Blog-headerP1.gif","type":"image\/gif"}],"author":"Tabby Worthington","twitter_card":"summary_large_image","twitter_creator":"@cPanel","twitter_site":"@cPanel","twitter_misc":{"Written by":"Tabby Worthington","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/","url":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/","name":"Securing Your cPanel: Intro to Server Security | cPanel","isPartOf":{"@id":"https:\/\/devel.www.cpanel.net\/#website"},"datePublished":"2020-04-20T19:25:00+00:00","dateModified":"2020-04-20T19:25:00+00:00","author":{"@id":"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/937065f5d955e1a72a1abd851bbb5a0c"},"breadcrumb":{"@id":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/devel.www.cpanel.net\/blog\/products\/intro-to-server-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/devel.www.cpanel.net\/"},{"@type":"ListItem","position":2,"name":"Securing Your cPanel: Intro to Server Security"}]},{"@type":"WebSite","@id":"https:\/\/devel.www.cpanel.net\/#website","url":"https:\/\/devel.www.cpanel.net\/","name":"cPanel","description":"Hosting Platform of Choices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/devel.www.cpanel.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/937065f5d955e1a72a1abd851bbb5a0c","name":"Tabby Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4391b167db175ebbd14ebfc95ba54f1f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4391b167db175ebbd14ebfc95ba54f1f?s=96&d=mm&r=g","caption":"Tabby Worthington"},"sameAs":["https:\/\/cpanel.net\/blog\/"],"url":"https:\/\/devel.www.cpanel.net\/blog\/author\/cptabby\/"}]}},"_links":{"self":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/posts\/55485"}],"collection":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/users\/85"}],"replies":[{"embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/comments?post=55485"}],"version-history":[{"count":0,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/posts\/55485\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/media\/65357"}],"wp:attachment":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/media?parent=55485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/categories?post=55485"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/tags?post=55485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}