---
title: "Security in Plesk"
source: "https://docs.nexcess.com/hosting/control-panel/plesk/security/"
description: "Fortify your server with Plesk's security tools. Learn to manage SSL, scan for malware, block intruders with Fail2Ban, and harden sites."
vertical: "Hosting"
date: "2025-07-09"
last_modified: "2026-06-30"
---

# Security in Plesk

The Plesk control panel provides tools to secure your server. Use these features to manage SSL/TLS certificates, scan for malware, prevent brute-force intrusions with **Fail2Ban**, and configure a web application firewall.

- ## [Adding a User in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/adding-a-user-in-plesk/)
    
    Plesk empowers server and domain control. Create users with custom permissions, restricting them to specific domains.
- ## [Adding Firewall Rules in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/adding-firewall-rules-in-plesk/)
    
    Windows servers using Plesk can use firewall rules to manage help manage server traffic. You can also add firewall rules using Windows Firewall, but adding firewall rules in Plesk is a good first line of defense.
- ## [Allowing a Domain User to Access RDP in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/allowing-a-domain-user-to-access-rdp-in-plesk/)
    
    Granting Remote Desktop Access to a customer on your Plesk server is uncommon but may be necessary for specific needs like unique installs or log searches. Plesk simplifies this process for Windows.
- ## [Changing Your Plesk Administrator Password](https://docs.nexcess.com/hosting/control-panel/plesk/security/changing-your-plesk-administrator-password/)
    
    Changing your Plesk administrator password secures access to your server’s websites. It’s distinct from root (Linux) or RDP (Windows) passwords, often with ‘admin’ username.
- ## [Generating an SSL Certificate Signing Request (CSR) in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/generating-an-ssl-certificate-signing-request-csr-in-plesk/)
    
    Obtaining an SSL certificate requires a Certificate Signing Request (CSR). Let Plesk simplify the process by encoding the necessary information for you.
- ## [Installing an SSL Certificate in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/installing-an-ssl-certificate-in-plesk/)
    
    An SSL certificate isn’t required on your website, but once you’ve added an SSL certificate, your site will be secure if you want to add secure login capabilities or ecommerce. Before you try to install an SSL certificate, make sure you’ve generated your CSR, ordered your SSL certificate, and verified your SSL certificate. Once these…
- ## [Modsec in Plesk (Linux)](https://docs.nexcess.com/hosting/control-panel/plesk/security/modsec-in-plesk-linux/)
    
    Manage ModSecurity in Plesk (Linux): Whitelist rules (global, folder, file, domain), disable, & adjust body size. Reconfigure Apache.