How to Harden Your cPanel Account: A Security Checklist

Most website compromises are not sophisticated — they exploit weak passwords, outdated software, or a setting left open. Working through a simple hardening checklist closes those doors. Here is a practical, cPanel-focused list to make your account a much harder target.

1. Strengthen your passwords

Use a long, unique password for cPanel — see creating strong passwords — and change it if it is old or reused. Update it via changing your cPanel password.

2. Turn on two-factor authentication

2FA means a stolen password alone cannot get in. Enable it — see enabling 2FA in cPanel — and on your client area too.

3. Secure every site with SSL

Install free SSL on all domains and force HTTPS with a redirect, so logins and data are always encrypted.

4. Keep software updated

Outdated WordPress, themes and plugins are the number-one way sites get hacked. Update promptly, and remove anything you no longer use.

5. Scan for malware regularly

Run scans so problems are caught early — see scanning with Imunify360 — and enable ModSecurity.

6. Lock down file permissions

Keep folders at 755 and files at 644, never 777 — see checking file permissions.

7. Back up, and test the backup

Take regular full backups and keep an off-site copy. A tested backup turns a disaster into an inconvenience.

8. Use SSH keys and block bad actors

If you use SSH, switch to key authentication, and block abusive IPs and bad bots.

Frequently asked questions

Where do I start if I only do three things?

Strong passwords, two-factor authentication, and keeping software updated. Those three stop the overwhelming majority of attacks on their own.

How often should I run through this?

Review it every few months, and any time you add a site or a new tool. Updates and backups, though, should be ongoing rather than occasional.

Does VernalWeb secure the server for me?

We secure and monitor the server itself and provide tools like firewalls and malware scanning. Securing your own sites, passwords and software is the part that stays with you — this checklist covers it.