Security in WHM

Securing an entire server environment is a heavy responsibility. A single vulnerability or compromised password can impact every domain and cPanel account hosted on your machine. However, building a robust defense does not mean you have to configure complex security protocols purely from the command line.

WebHost Manager (WHM) centralizes your most critical protective measures into intuitive, server-wide interfaces. From the Security Center to advanced firewall configurations, WHM gives you the top-down administrative control necessary to proactively block threats, enforce strict access policies, and keep your software patched against the latest vulnerabilities.

Explore the guides below to learn how to:

• Maintain Server Health: Run the built-in Security Advisor to catch vulnerabilities, configure automatic software updates, and safely delete or restore entire cPanel accounts as needed.
• Control Access & Authentication: Protect your server by routinely changing root passwords, enforcing Two-Factor Authentication (2FA), restricting logins with Host Access Control, and securely generating API tokens.
• Manage Firewalls & IPs: Take control of your network traffic using ConfigServer Security & Firewall (CSF) and ModSecurity to block malicious attackers or whitelist legitimate users.
• Automate Encryption: Ensure every site on your server stays secure by configuring Let’s Encrypt for AutoSSL, and learn how to troubleshoot missing private keys during certificate renewals.

---