How to Keep Your cPanel Account and Sites Secure
Lock down a cPanel account: turn on two-factor login, keep the computer you log in from clean, and remove the email, FTP, WordPress, plugin, theme and database access you no longer need.
Practical articles on web hosting, WordPress, domains, servers and website security from the Siteharbour team.
Lock down a cPanel account: turn on two-factor login, keep the computer you log in from clean, and remove the email, FTP, WordPress, plugin, theme and database access you no longer need.
Install Zimbra on Ubuntu step by step, then lock it down: DNS and reverse DNS, a real TLS certificate with renewal, SPF, DKIM, DMARC, a firewalled admin console and a tested backup.
A redirect loop in WordPress has three usual causes. One curl command shows which addresses are bouncing, and that pattern tells you the fix.
A 502 from Nginx means the program behind it did not answer. The last line of the error log says how it failed, and each message has one fix.
WordPress cannot reach its database. Test the login by hand and the error number tells you the cause: wrong details, a stopped server, or a full one.
Create an SSH key in PowerShell, copy it to your Linux server without ssh-copy-id, save your servers in a config file and switch off password logins.
Set up UFW on Ubuntu without locking yourself out: allow SSH first, deny the rest, open only what you need, and cover Docker and IPv6.
Read SMART data with smartctl on SATA and NVMe drives: which counters warn of failure, how to run self-tests, and how to get alerts from smartd.
WordPress emails land in spam because the web server is not an authorised sender. Fix it with SMTP, the right From address, and SPF and DKIM.