Security

Password-protected directories, IP blacklisting, hotlink protection, and related control panel security features.

What to Do If You Lose Your Two-Factor Authentication Device for Your Control Panel

If you've lost the phone or app you use for two-factor authentication on your cPanel or DirectAdmin login, here's how to regain access using backup codes or by contacting support.

How to Check Your Control Panel's Login History for Suspicious Activity

See how to view your cPanel or DirectAdmin login history to spot unauthorized logins, and what to do if you find a suspicious entry.

What to Do If You're Locked Out of Your Control Panel After Too Many Failed Logins

If your cPanel or DirectAdmin login is temporarily blocked after several wrong password attempts, here's why it happens and exactly what to do about it.

How to Set Up SSH Key Authentication for Your Hosting Account

Learn how to generate an SSH key pair and authorize it in cPanel or DirectAdmin so you can log in to your hosting account over SSH without typing a password each time.

Why Your IP Address Got Blocked and How to Fix It

If you're suddenly locked out of your cPanel, DirectAdmin, or website, your IP address may have been automatically blocked. Here's how to check for it and remove the block.

How to Restore a File Quarantined by ClamAV

If a ClamAV malware scan quarantines a file on your website, this explains where to find it and how to safely restore it if it was flagged by mistake.

How to Enable Brute-Force Login Protection for Your Control Panel

Brute-force protection automatically blocks IP addresses after too many failed login attempts on your control panel, stopping automated password-guessing attacks before they succeed.

How to Enable Leech Protection to Stop Password Sharing on Your Website

Leech Protect watches a password-protected directory on your website and automatically locks out access if the same login is used from too many different visitors in a short time, a common sign the password has been shared or leaked.

How to Scan Your Website for Malware Using ClamAV (cPanel and DirectAdmin)

Learn how to run a free malware scan on your website using the ClamAV virus scanner built into your hosting control panel, and what to do if it finds infected files.

How to Fix a 403 Forbidden Error Caused by ModSecurity

If your website suddenly returns a 403 Forbidden error on a form submission or file upload, a ModSecurity firewall rule may be blocking it; here is how to find and disable the specific rule causing it.

How to Disable Directory Listing on Your Website

Directory listing shows a plain list of every file in a folder that has no index page, which can expose files you never meant visitors to see. Here's how to turn it off in cPanel and DirectAdmin.

How to Enable Two-Factor Authentication for Your Control Panel Login

Learn how to turn on two-factor authentication (2FA) for your cPanel or DirectAdmin login so a stolen password alone can't get someone into your hosting account.

How to Password-Protect a Directory on Your Website

Restrict access to a folder on your site, such as a staging area or client portal, with a username and password using your control panel.

How to Block an IP Address from Your Website

Stop a specific visitor, bot, or range of IP addresses from reaching your website using your control panel's IP blocking tool.

How to Enable Hotlink Protection for Your Images

Stop other websites from embedding your images directly and eating into your hosting bandwidth by enabling hotlink protection.