---
title: "Security"
source: "https://docs.nexcess.com/learn/security/"
description: "Covers Firewalls and SSL. Includes Managed WordPress or WooCommerce plan — change email password, Enable SMS Authentication in the Nexcess Portal, How to set up the Cloudflare CDN for Magento 2, SpamAssassin Configuration in the Nexcess Cloud and Built-In Security with StellarSites. 245 articles."
taxonomy: "lw_resource_category"
articles: "245"
---

# Security

Covers Firewalls and SSL. Includes Managed WordPress or WooCommerce plan — change email password, Enable SMS Authentication in the Nexcess Portal, How to set up the Cloudflare CDN for Magento 2, SpamAssassin Configuration in the Nexcess Cloud and Built-In Security with StellarSites. 245 articles.

## Sections

- [Firewalls](https://docs.nexcess.com/learn/security/firewalls.md): Includes Cloud Sites IP Addresses for Whitelisting, Configuring Your Cloud Firewall, Blocking IP Addresses in InterWorx Web Panel, Managing Your Firewall in InterWorx Web Panel and How to manage firewall whitelists in SiteWorx. 31 articles.
- [Passwords](https://docs.nexcess.com/learn/security/passwords.md)
- [SSL](https://docs.nexcess.com/learn/security/ssl.md): Covers Let's Encrypt. Includes What is Cloudflare CDN? How to use Cloudflare CDN, Cloudflare SSL with Cloudflare origin certificate, How to cancel a SSL certificate, How SSL and HTTPS Work on StellarSites and SSL Checker Tool. 66 articles.

## Articles

- [Managed WordPress or WooCommerce plan — change email password](https://docs.nexcess.com/sites-stores/managed-woocommerce/email-management/change-password.md): For when you prefer to use a custom password instead of a system-generated one, let's review the change email password steps — for email hosting related to Word…
- [Enable SMS Authentication in the Nexcess Portal](https://docs.nexcess.com/sites-stores/account/account-security/sms-authentication.md): Protect your Nexcess account with SMS 2FA. Our guide shows you how to enable text message codes for secure and fast two-factor authentication.
- [How to set up the Cloudflare CDN for Magento 2](https://docs.nexcess.com/sites-stores/managed-magento/store-management/cdn-cloudflare-for-magento-2.md): Cloudflare offers a robust CDN for Magento 2 stores. It intelligently routes content using the most efficient network pathways based on geography — for faster p…
- [SpamAssassin Configuration in the Nexcess Cloud](https://docs.nexcess.com/sites-stores/managed-magento/email-management/spamassassin.md): SpamAssassin analyzes email messages, evaluates their likelihood of being spam, and logs the results — then spam can be filtered using thresholds and rules.
- [Built-In Security with StellarSites](https://docs.nexcess.com/sites-stores/stellarsites/built-in-security-with-stellarsites.md): When it comes to website security, the best setup is one you don’t have to manage daily. StellarSites gives you that peace of mind—combining a built-in firewall…
- [Fortify your web application security with Performance Shield](https://docs.nexcess.com/sites-stores/hosting-services/sites-and-stores/cloudflare-performance-shield.md): Bot-based threat and DDoS protection are just two of the many ways our Performance Shield add-on — powered by Cloudflare — improves web application security and…
- [What is Cloudflare CDN? How to use Cloudflare CDN](https://docs.nexcess.com/sites-stores/performance/content-delivery-networks-cdns/cloudflare.md): What is Cloudflare CDN? Learn how to use Cloudflare CDN in this article.
- [Email Authentication — How to Check SPF Records and DKIM Records](https://docs.nexcess.com/hosting/email/spam/check-spf-records.md): Knowing the configuration options used to check SPF records and DKIM records is important for setting up email authentication. Let's review them in the context…
- [Migration guide: transfer a Squarespace domain to Nexcess](https://docs.nexcess.com/sites-stores/portal/domains-and-dns/domain-registrations/migrate-a-squarespace-domain.md): Learn how to transfer your Squarespace domain and website to Nexcess — and why you should. You will discover Squarespace has many limitations that Nexcess hosti…
- [Managed WordPress or WooCommerce plan — change email password](https://docs.nexcess.com/sites-stores/managed-woocommerce/email-management/change-email-password.md): How often have you misplaced or forgotten your email password and wished you could instantly establish a new unique password? You can learn more about the robus…
- [How to cancel a SSL certificate](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/cancel-an-ssl-certificate-order.md): This guide shows you how to cancel or delete an SSL certificate for your hosting service directly within the Nexcess Client Portal (sites-portal.nexcess.com).
- [Nexcess: MySQL & IP Whitelisting for Remote Access](https://docs.nexcess.com/sites-stores/managed-magento/database-management/whitelist-ips.md): It’s possible to allow MySQL remote connections from any host. Learn how to whitelist MySQL host IP. Grant MySQL remote access with this article.
- [Nexcess-provided WordPress plugins for ecommerce and sites](https://docs.nexcess.com/sites-stores/managed-woocommerce/plugin-management/ecommerce-plugins.md): Configured using the Nexcess Installer, our managed WordPress and managed WooCommerce hosting plans at Nexcess come with multiple WordPress plugins for ecommerc…
- [Secure Shell (SSH) user setup, access, and FAQ for the Nexcess Cloud](https://docs.nexcess.com/sites-stores/account/account-security/ssh-users.md): Secure Shell (SSH) users on the Nexcess Cloud have a particular configuration that customers may not be used to. SSH user setup was done in such a way to help w…
- [HIPAA Compliance](https://docs.nexcess.com/hosting/security/security-compliance/hipaa-compliance.md): HIPAA-compliant hosting protects patient data with encryption, firewalls & backups. A signed Business Associate Agreement (BAA) is essential.
- [Setting Up and Using SSH Keys](https://docs.nexcess.com/hosting/server-administration/linux/setting-up-and-using-ssh-keys.md): Boost SSH security with SSH Keys, a pair of keys that, when used together, enable secure connections, allowing only authorized users to log in.
- [Magento or Flex Cloud plan — how to set email password](https://docs.nexcess.com/sites-stores/managed-magento/email-management/change-password.md): Using the Nexcess Clent Portal, let's learn how to set an email password that you customize for your Magento or Flex Cloud plan instead of using the system-gene…
- [How to update PHP versions in the Nexcess Cloud](https://docs.nexcess.com/sites-stores/managed-magento/store-management/adjust-php-version.md): Update PHP versions from the Nexcess Client Portal to leverage major performance and security improvements for your website. Learn everything you need to know.
- [Using SSH keys for SFTP users with mod_sftp (InterWorx)](https://docs.nexcess.com/hosting/control-panel/interworx/nodeworx/security/using-ssh-keys-for-sftp-users-with-mod_sftp-interworx.md): Secure SFTP on SiteWorx: Set up SSH key auth with `mod_sftp`. Enhance security & automate logins. Guide covers key gen, config & port 24.
- [How SSL and HTTPS Work on StellarSites](https://docs.nexcess.com/sites-stores/stellarsites/how-ssl-and-https-work-on-stellarsites.md): SSL and HTTPS are essential for securing your website, building visitor trust, and preventing browser security warnings. This guide explains how StellarSites ha…
- [DMARC email security: improving your email security infrastructure](https://docs.nexcess.com/sites-stores/email/understanding-a-dmarc-record-and-adding-one-to-your-dns.md): This article gives an overview of the DMARC email security and authentication protocol that you should leverage to improve your email security infrastructure.
- [A Liquid Web customer’s guide to vulnerability scans](https://docs.nexcess.com/hosting/security/guide-to-vulnerability-scans.md): Vulnerability scans are an important part of maintaining your server's security, especially in today's online threat landscape. Learn how to leverage them when…
- [Adding a Sender Policy Framework (SPF) Record](https://docs.nexcess.com/hosting/email/spam/adding-a-sender-policy-framework-spf-record.md): SPF records list authorized email servers for your domain, preventing email spoofing by spammers who mimic your server to deceive recipients and evade spam filt…
- [Migrations — how Nexcess handles websites infected with malware](https://docs.nexcess.com/sites-stores/migrations/nexcess/migrating-with-malware.md): Gain knowledge on how to clean up websites infected with malware. Plus, learn how the Nexcess migration team helps as you switch hosting providers — if even you…
- [Whitelisting IPs in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/whitelisting-ips-in-whm.md): CSF is the default firewall on Liquid Web servers. Unblock and whitelist IPs via WHM, managing CSF for enhanced server security.
- [Viewing Error and Access Logs in the Client Portal](https://docs.nexcess.com/sites-stores/managed-magento/store-management/access-and-error-logs.md): Need to troubleshoot your website? This guide shows you how to find, download, and read server access and error logs in the Nexcess Client Portal.
- [Magento 2 Admin Login: Disable 2FA](https://docs.nexcess.com/sites-stores/cms/magento/disable-2fa-temporarily-for-magento-2-admin-login.md): Although not recommended for production, learn how to disable 2FA in Magento 2.4+ for dev or staging environments using the command line.
- [Best Practices: Enabling Automatic Updates in WordPress](https://docs.nexcess.com/hosting/cms/wordpress/best-practices-enabling-automatic-updates-in-wordpress.md): Learn how to enable automatic updates for WordPress core, plugins, and themes. Protect your site with these best practices for editing wp-config.php.
- [How to harden your WordPress site](https://docs.nexcess.com/hosting/cms/wordpress/how-to-harden-your-wordpress-site.md): Hardening is securing your WordPress site by reducing vulnerabilities through best practices, updates, and protective settings.
- [Enabling DKIM for Premium Business Email](https://docs.nexcess.com/hosting/email/premium-business-email/enabling-dkim-for-premium-business-email.md): DKIM (DomainKeys Identified Mail) adds encrypted digital signatures to emails, preventing spoofing and enhancing email security by verifying the sender's authen…
- [How to install OpenSSH to manage Linux servers](https://docs.nexcess.com/hosting/server-administration/linux/how-to-install-openssh-linux-servers.md): Install OpenSSH on Linux and streamline SSH connections while increasing system security. Manage related components, configuration files, and SSH keys with our…
- [Account Security in Sites & Stores](https://docs.nexcess.com/sites-stores/account/account-security.md): Secure your Sites & Stores account. Learn to enable 2FA, manage user access, use SSH keys for secure logins, and audit account activity.
- [Enterprise server cluster support documentation](https://docs.nexcess.com/sites-stores/portal/support-center/management-and-support-levels/managed-applications-cluster-scope-of-support.md): Review the full documentation related to Nexcess enterprise server cluster support covering the technical specifications, features, services, and architecture.
- [Locating your SSH (Secure Shell) credentials in Managed WordPress/WooCommerce](https://docs.nexcess.com/sites-stores/managed-woocommerce/store-management/ssh-credentials.md): SSH (Secure Shell) and SSH FTP (SFTP) access via command line is available in Managed WordPress and Managed WooCommerce plans and credentials are found within e…
- [WordPress security features — changing security keys and salts](https://docs.nexcess.com/sites-stores/managed-wordpress/plugin-management/security-keys-salts.md): An essential WordPress security feature is the implementation of authentication keys and salts to safeguard the WordPress Admin Panel from unauthorized access b…
- [How to enable SSH access in Siteworx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/ssh-access.md): This guide shows how to enable and manage your SSH account in SiteWorx. Learn to activate SSH access, reset passwords, add keys, and whitelist IPs.
- [How to protect your Magento store from the Credit Card Hijack exploit](https://docs.nexcess.com/sites-stores/cms/magento/security/prevent-credit-card-hijack-exploit.md): How to address the Credit Card Hijack security breach by applying the latest patches and performing other critical tasks.
- [How to improve the security of your Magento store](https://docs.nexcess.com/sites-stores/cms/magento/security/improve-store-security.md): Various methods of hardening your Magento store’s security, though many of these apply to any content management system (CMS).
- [How to configure Magento to use your SSL certificate](https://docs.nexcess.com/sites-stores/cms/magento/security/configure-ssl-certificates.md): Learn how to configure your Magento store to use a Secure Sockets Layer (SSL) certificate, which allows your site to exchange encrypted information with web use…
- [Magento Security Best Practices](https://docs.nexcess.com/hosting/cms/magento/security.md): Secure your online store with our Magento Security Best Practices. Learn to configure SSL, harden access controls, and prevent data breaches.
- [How to secure your ExpressionEngine site](https://docs.nexcess.com/sites-stores/cms/secure-your-expression-engine-website.md): Learn how to secure your ExpressionEngine (EE) site — including some of best practices in the area of security for the purpose of hardening your EE site.
- [Best Practices: Changing Your CMS Login URL](https://docs.nexcess.com/hosting/cms/best-practices-changing-your-cms-login-url.md): Most Content Management Systems (CMS's) have a unique identifying login url. For example, WordPress uses /wp-admin for your login home page. Because of this, ha…
- [Using ALIAS DNS Records For Domains in Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/website-management/using-alias-dns-records-for-domains-in-cloud-sites.md): Cloud Sites now uses Alias DNS record types to manage DNS for hosted websites. This article includes directions for using Alias DNS records in the Cloud Sites e…
- [Cloud Sites IP Addresses for Whitelisting](https://docs.nexcess.com/hosting/cloud-sites/website-management/cloud-sites-ip-addresses-for-whitelisting.md): Need to whitelist your Cloud Sites domain? Learn how to use your test link to identify your data center and find the correct outbound IP address ranges.
- [Change Your FTP Password in Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/file-management/change-your-ftp-password-in-cloud-sites.md): This article will show you how to change your FTP user passwords in Cloud Sites.
- [web_custom40.config File for Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/asp-net-and-iis/web_custom40-config-file-for-cloud-sites.md): Add this code to your web.config file to run applications in medium trust. Review the article to confirm its suitability.
- [web_custom35.config File for Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/asp-net-and-iis/web_custom35-config-file-for-cloud-sites.md): Adding this code to your web.config file allows applications to run in medium trust. Read the article to ensure this action is suitable.
- [Run Applications Under Medium Trust in Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/asp-net-and-iis/run-applications-under-medium-trust-in-cloud-sites.md): The Cloud Sites Windows environment uses a modified Medium Trust for ASP.NET 3.5 servers, allowing specific permissions like OleDb, Odbc, Configuration, Reflect…
- [Reset Your Shopware User Password](https://docs.nexcess.com/sites-stores/shopware/reset-your-shopware-user-password.md): Forgot your password? Learn how to securely reset your Shopware user password on Nexcess and quickly regain access to your admin panel.
- [Frequently Encountered Issues](https://docs.nexcess.com/sites-stores/stellarsites/frequently-encountered-issues.md): Encountered some issues along the way? This guide covers common issues that may occur on your StellarSites website and the steps for troubleshooting them. If th…
- [Change Your cPanel Password](https://docs.nexcess.com/hosting/control-panel/whm/cpanel/security/change-your-cpanel-password.md): Changing the password in your cPanel account is a simple process and only takes a few moments. This tutorial covers only the main password, any other users crea…
- [Configuring Your Cloud Firewall](https://docs.nexcess.com/hosting/security/firewall-management/cloud-firewall/configuring-your-cloud-firewall.md): Firewalls safeguard servers by filtering network traffic based on rules. All Liquid Web servers have a software firewall; Linux servers typically have CSF, whil…
- [Changing Your Plesk Administrator Password](https://docs.nexcess.com/hosting/control-panel/plesk/security/changing-your-plesk-administrator-password.md): Changing your Plesk administrator password secures access to your server's websites. It's distinct from root (Linux) or RDP (Windows) passwords, often with 'adm…
- [Allowing a Domain User to Access RDP in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/allowing-a-domain-user-to-access-rdp-in-plesk.md): Granting Remote Desktop Access to a customer on your Plesk server is uncommon but may be necessary for specific needs like unique installs or log searches. Ples…
- [How to set up DMARC for your domain](https://docs.nexcess.com/hosting/email/spam/how-to-set-up-dmarc-for-your-domain.md): Learn how to set up DMARC, DKIM, and SPF to ensure that your outgoing email can authenticated and not be spoofed, taking an active role in protecting your onlin…
- [Using Remote Desktop Protocol (RDP) to Log into Your Windows Server](https://docs.nexcess.com/hosting/server-administration/windows/using-remote-desktop-protocol-rdp-to-log-into-your-windows-server.md): While Plesk handles most server tasks, for remote access to a Windows server, use Remote Desktop Protocol (RDP). Liquid Web servers support RDP for a familiar d…
- [Troubleshooting: RBLs and Email Delivery Problems (Rejected Email Messages)](https://docs.nexcess.com/hosting/email/spam/troubleshooting-rbls-and-email-delivery-problems-rejected-email-messages.md): Emails bouncing back? Learn how to fix rejected messages, check RBLs, and configure SPF, DKIM, and DMARC records to improve email deliverability.
- [Logging into Your Server via Secure Shell (SSH)](https://docs.nexcess.com/hosting/server-administration/linux/logging-into-your-server-via-secure-shell-ssh.md): The command line, dating back to the 1960s, lets you control your computer via text-based commands. Securely access servers via SSH for added protection.
- [Enable Two-Factor Authentication in the Liquid Web Portal](https://docs.nexcess.com/hosting/portal/account/account-security/enable-two-factor-authentication.md): Protect your Liquid Web account. Learn how to easily enable Two-Factor Authentication (2FA) with Google Authenticator or Duo Mobile.
- [Assign Read-Only Permission for a Database User in Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/database-management/assign-read-only-permission-for-a-database-user-in-cloud-sites.md): Limit user access and secure your Cloud Sites data. Learn how to easily assign read-only permissions for your MSSQL and MariaDB database users.
- [Change a Database User Password in Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/database-management/change-a-database-user-password-in-cloud-sites.md): This article will show you how to change database user passwords in Cloud Sites.
- [Order an SSL Certificate](https://docs.nexcess.com/hosting/security/ssl/ordering-an-ssl-certificate.md): SSL certificates secure web traffic with public key encryption. Verify website legitimacy with SSL. This article focuses on ordering SSL certificates.
- [Use .htaccess to Password Protect Your Site in Cloud Sites](https://docs.nexcess.com/hosting/cloud-sites/website-management/use-htaccess-to-password-protect-your-site-in-cloud-sites.md): While developing your Cloud Sites website, you can use .htaccess to password protect your site or specific pages for added security.
- [Mitigating Common WordPress Brute Force Attacks](https://docs.nexcess.com/hosting/cms/wordpress/mitigating-common-wordpress-brute-force-attacks.md): Dealing with attacks on your WordPress site? Find solutions to quickly mitigate these attacks.
- [How to manage SSL certificates for system services](https://docs.nexcess.com/sites-stores/control-panel/interworx/nodeworx/security/ssl-certificates-for-system-services.md): Nexcess clients can learn how to perform various operations with SSL certificates for system services with NodeWorx.
- [Generating an API Token in InterWorx](https://docs.nexcess.com/hosting/control-panel/interworx/nodeworx/security/generating-an-api-token-in-interworx.md): API Tokens enhance server connections' simplicity and security compared to usernames/passwords. Creating one in InterWorx involves just a few steps for added co…
- [Changing Your Password in Interworx Web Panel](https://docs.nexcess.com/hosting/control-panel/interworx/nodeworx/security/changing-your-password-in-interworx-web-panel.md): Security best practices recommend regular password changes. InterWorx Web Panel facilitates this with a few clicks on the main dashboard for easy password updat…
- [Blocking IP Addresses in InterWorx Web Panel](https://docs.nexcess.com/hosting/control-panel/interworx/nodeworx/security/blocking-ip-addresses-in-interworx-web-panel.md): Learn to block a malicious IP address using ConfigServer Security & Firewall (CSF) on your Cloud VPS. This tutorial outlines the few simple steps.
- [NodeWorx Security](https://docs.nexcess.com/hosting/control-panel/interworx/nodeworx/security.md): Master your server's defense. Learn to configure firewalls, block threats, and manage security settings within the NodeWorx control panel.
- [Managing Your Firewall in InterWorx Web Panel](https://docs.nexcess.com/hosting/control-panel/interworx/nodeworx/security/managing-your-firewall-in-interworx-web-panel.md): A firewall acts as a protective barrier between your computer and the Internet. In InterWorx servers, the default software firewall is ConfigServer Security and…
- [How to change email account passwords in SiteWorx](https://docs.nexcess.com/hosting/control-panel/interworx/siteworx/email-management/how-to-change-email-account-passwords-in-siteworx.md): How clients on physical (non-cloud) servers can use SiteWorx change the password for email accounts on their domain.
- [How to change email account passwords in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/email-management/passwords.md): Use SiteWorx to change the password for email accounts on your domain.
- [Changing Your Password in SiteWorx Web Panel](https://docs.nexcess.com/hosting/control-panel/interworx/siteworx/security/changing-your-password-in-siteworx-web-panel.md): As the server administrator, you can change domain user passwords from your panel, aiding users who have lost or forgotten their passwords. Alternatively, domai…
- [How to set up Let’s Encrypt in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/lets-encrypt-ssl-certificates.md): How to install Let's Encrypt, a type of SSL certificate available for SiteWorx.
- [How to reset your SSH password and add SSH keys in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/reset-ssh-password.md): How Nexcess clients on a Siteworx server can reset SSH passwords and add SSH keys.
- [How to recreate keys for SSL certificates in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/generate-a-csr-and-private-key-pair.md): Recreate SSL keys using SiteWorx.
- [How to prevent bandwidth theft or Hotlinking](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/prevent-bandwidth-theft-hotlinking.md): Learn how to use the Hotlink Protection feature in SiteWorx to help protect your site's images and videos from potential hotlinking and bandwidth theft.
- [How to manage firewall whitelists in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/allow-or-deny-access-via-firewall.md): Learn how Nexcess clients can use SiteWorx to whitelist an IP address.
- [How to allow or block hostnames and IP addresses in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/allow-or-deny-access-via-htaccess.md): Use SiteWorx to allow or block specific hostnames and IP addresses while managing permissions for a site or domain directory.
- [How to activate two-factor authentication in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/security/two-factor-authentication.md): How users with Siteworx servers can activate two-factor authentication for their SiteWorx account.
- [Generating an SSL Certificate Signing Request (CSR) in Interworx Web Panel](https://docs.nexcess.com/hosting/control-panel/interworx/siteworx/security/generating-an-ssl-certificate-signing-request-csr-in-interworx-web-panel.md): Generating a Certificate Signing Request (CSR) is the initial step in obtaining an SSL Certificate for your server. While it can be done manually, InterWorx Web…
- [SiteWorx Security](https://docs.nexcess.com/hosting/control-panel/interworx/siteworx/security.md): Secure your site with SiteWorx. Learn to manage users, protect directories, enable SSL, prevent hotlinking, and enhance your website's security.
- [How to resolve the SSL warning when logging in to SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/website-management/resolve-ssl-warning-when-logging-in.md): Why you may ignore the SSL warning within SiteWorx when using a dedicated server.
- [How to generate CSRs in Siteworx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/website-management/generate-a-csr.md): Learn how Nexcess clients on physical (non-cloud) servers can use SiteWorx to generate and view a CSR — also known as a Certificate Signing Request (CSR).
- [How to enable DKIM](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/website-management/enable-dkim.md): Learn about DomainKeys (DKIM) and how Nexcess reseller clients can enable them.
- [Enable DKIM in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/email-management/enable-dkim-in-plesk-onyx.md): DomainKeys Identified Mail (DKIM) adds encrypted signatures to emails, enhancing security by preventing spoofing and verifying messages' origins.
- [Change Email Passwords via Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/email-management/change-email-passwords-via-plesk.md): Strong password security is vital for protecting your server and all the services Plesk helps you manage. If you use your server for email, you want to make sur…
- [Modsec in Plesk (Linux)](https://docs.nexcess.com/hosting/control-panel/plesk/security/modsec-in-plesk-linux.md): Manage ModSecurity in Plesk (Linux): Whitelist rules (global, folder, file, domain), disable, & adjust body size. Reconfigure Apache.
- [Security in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security.md): Fortify your server with Plesk's security tools. Learn to manage SSL, scan for malware, block intruders with Fail2Ban, and harden sites.
- [Change Email Passwords via cPanel](https://docs.nexcess.com/hosting/control-panel/whm/cpanel/email-management/change-email-passwords-via-cpanel.md): Strong password security is vital for protecting your cPanel-managed server. Sometimes, however, you may need to change an email password due to your security p…
- [Troubleshooting in cPanel: FTP: Failed to Retrieve Directory Listing](https://docs.nexcess.com/hosting/control-panel/whm/cpanel/troubleshooting-in-cpanel-ftp-failed-to-retrieve-directory-listing.md): Fix cPanel FTP timeout errors and "Failed to retrieve directory listing" by forcing active FTP or configuring passive ports in your server firewall.
- [Enabling Two-Factor Authentication in cPanel](https://docs.nexcess.com/hosting/control-panel/whm/cpanel/security/enabling-two-factor-authentication-in-cpanel.md): Secure your cPanel account with Two-Factor Authentication (2FA). Learn how to set up and configure 2FA using Google Authenticator or Duo Mobile.
- [Missing Private Key for SSL in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/missing-private-key-for-ssl-in-whm.md): When renewing third-party SSLs on your Liquid Web server in WHM, the renewed certificate may lack the original private key. You can use the private key from the…
- [Limiting WHM Access Using Host Access Control](https://docs.nexcess.com/hosting/control-panel/whm/security/limiting-whm-access-using-host-access-control.md): You can use Host Access Control in WHM to add an extra layer of security to have control over which IP addresses are able to connect to critical administrative…
- [Enabling Two-Factor Authentication in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/enabling-two-factor-authentication-in-whm.md): Secure your server by enabling Two-Factor Authentication (2FA) in WHM. Learn how to configure 2FA for root access and manage cPanel users.
- [Enable Let’s Encrypt for AutoSSL on WHM-Based Servers](https://docs.nexcess.com/hosting/control-panel/whm/security/enable-lets-encrypt.md): Follow our tutorial to assign free SSLs on all your domains that will automatically renew! We walk you through the SSL process with easy-to-follow screenshots a…
- [Changing Your Root Password in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/changing-your-root-password-in-whm.md): Changing the root password alters your main server and WHM login credentials, ensuring uniqueness and enhancing security.
- [Blocking IP Addresses in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/blocking-ip-addresses-in-whm.md): Need to block an IP? This guide shows how to use ConfigServer Security & Firewall in WHM to permanently or temporarily deny any IP address.
- [API Tokens for Remote Access in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/api-tokens-for-remote-access-in-whm.md): Create and manage WHM API Tokens to allow secure, password-less remote access or to enable API functionality for your server.
- [WHM Security Advisor](https://docs.nexcess.com/hosting/control-panel/whm/security/whm-security-advisor.md): cPanel's Security Advisor alerts admins to potential security issues and configurations, helping ensure server security and performance.
- [Whitelisting ModSecurity Rules in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/whitelisting-modsecurity-rules-in-whm.md): ModSecurity is a vital defense against malicious attacks. If accidental IP blocking happens, use the ModSecurity CMC plugin in WHM to whitelist IPs.
- [Unblock Your WHM Server’s IP Address](https://docs.nexcess.com/hosting/control-panel/whm/security/unblock-your-whm-servers-ip-address.md): Your server firewall blocks malicious traffic based on rules but can sometimes affect legitimate access. If you're locked out, unblock your IP.
- [Security in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security.md): Lock down your server with WHM. Use Security Advisor, CSF firewall, cPHulk, and ModSecurity to protect against threats and secure data.
- [Multi-Factor Authentication for Premium Business Email](https://docs.nexcess.com/hosting/email/premium-business-email/multi-factor-authentication-for-premium-business-email.md): The Premium Business Email Control Panel offers two options to enable multi-factor authentication during your initial login.
- [Blacklisting Email Addresses, Domains, and IPs in Premium Business Email](https://docs.nexcess.com/hosting/email/premium-business-email/blacklisting-email-addresses-domains-and-ips-in-premium-business-email.md): If you find that spam from certain senders, domains, or IP addresses is sneaking through the Premium Business Email spam filter, you can create a blacklist to b…
- [Whitelist Email Addresses, Domains, and IPs in Premium Business Email](https://docs.nexcess.com/hosting/email/premium-business-email/whitelisting-in-premium-business-email.md): Prevent legitimate messages from going to spam. Learn how to whitelist email addresses, domains, and IPs in Premium Business Email and webmail.
- [Use SMS to  Recover a Premium Business Email Password](https://docs.nexcess.com/hosting/email/premium-business-email/user-management/use-sms-to-recover-a-premium-business-email-password.md): Premium Business Email and Email Plus webmail applications have the functionality to provide password recovery via SMS. All you need is a phone number, and you…
- [Reset a User Password as an Administrator in Premium Business Email](https://docs.nexcess.com/hosting/email/premium-business-email/user-management/reset-a-user-password-as-an-administrator-in-premium-business-email.md): Resetting a user's email password from the Email control panel is necessary if forgotten or misplaced. However, prioritize security when resetting and notifying…
- [Managing Administrator Settings in Your Email Control Panel](https://docs.nexcess.com/hosting/email/premium-business-email/user-management/managing-administrator-settings-in-your-email-control-panel.md): Once you add an administrator in the Premium Business Email control panel, you can manage their account access, passwords and enable security measures like two-…
- [Turning on SMTP Authentication](https://docs.nexcess.com/hosting/email/turning-on-smtp-authentication.md): Configuring email on desktop or mobile can be complex due to various settings. This article focuses on resolving SMTP authentication issues.
- [RBL Failure: error open resolver](https://docs.nexcess.com/hosting/email/spam/rbl-failure-error-open-resolver.md): Using RBLs helps reduce spam, but a public DNS resolver may block emails. Use a private resolver to fix it.
- [Enabling SpamAssassin for Spam Filtering](https://docs.nexcess.com/hosting/email/spam/enabling-spamassassin-for-spam-filtering.md): Reduce inbox spam by enabling SpamAssassin in cPanel or Plesk. Learn how to configure scoring thresholds, auto-delete, blacklists, and more.
- [Enabling DMARC](https://docs.nexcess.com/hosting/email/spam/enabling-dmarc.md): DMARC (Domain-Based Message Authentication, Reporting, and Conformance) DNS record enhances email security by enforcing DKIM and SPF checks, specifying actions…
- [Spam Management](https://docs.nexcess.com/hosting/email/spam.md): Combat spam with our central resource guide. Learn to configure filters, manage quarantines, and protect your inbox from junk and phishing.
- [How to View SSH Log Files](https://docs.nexcess.com/sites-stores/flex-plans/website-management/log-files.md): Easily and quickly view SSH log files using for WordPress or Magento website management tasks to track down errors and their causes.
- [Resetting the root password for your Bare Metal server](https://docs.nexcess.com/hosting/hosting-services/bare-metal-servers/resetting-the-root-password-for-your-bare-metal-server.md): Locked out of your Bare Metal server? Learn how to securely reset your Linux root password for Ubuntu, Debian, Rocky, and AlmaLinux via the GRUB menu.
- [Accessing Your Global Private Fabric VPN Configuration Guide](https://docs.nexcess.com/hosting/hosting-services/global-private-fabric/configuration-guide.md): Learn how to access your Global Private Fabric (GPF) VPN configuration guide. Get the credentials to connect your external server or office.
- [How to Create a VPN with Global Private Fabric](https://docs.nexcess.com/hosting/hosting-services/global-private-fabric/create-vpn.md): Create a VPN interconnect for your GPF in portal.nexcess.com. Securely extend your private network to external servers with WireGuard or IPSec.
- [Change Your Liquid Web Account Password](https://docs.nexcess.com/hosting/portal/account/account-security/changing-your-liquid-web-account-password.md): Regularly changing account passwords enhances your overall security. Unauthorized access to your Liquid Web account can compromise servers and websites.
- [Change Your Support Passphrase](https://docs.nexcess.com/hosting/portal/account/account-security/change-your-support-passphrase.md): Upon purchase, Liquid Web assigns a default passphrase for account authentication. Once verified, you can customize it to something memorable.
- [Log into Liquid Web Using Google SSO](https://docs.nexcess.com/hosting/portal/account/log-into-liquid-web-using-google-sso.md): Liquid Web lets you use your Google account as an SSO login, simplifying your login into our customer portal: portal.nexcess.com.
- [Using Secure Notes for Sensitive Information](https://docs.nexcess.com/hosting/portal/account/account-security/using-secure-notes-for-sensitive-information.md): Safely share passwords and sensitive info with our Support team using Secure Notes. Find, view, or create notes under the Account tab.
- [Switching Two-Factor Authentication to a New Device](https://docs.nexcess.com/hosting/portal/account/account-security/switching-two-factor-authentication-to-a-new-device.md): Got a new phone? Learn how to transfer your Two-Factor Authentication (2FA) settings to a new device, even if you have lost access to your old phone.
- [Setting Up Your Cloud VPN](https://docs.nexcess.com/hosting/portal/account/account-security/setting-up-your-cloud-vpn.md): Liquid Web provides a free VPN to encrypt and secure your data, shielding it from third-party eyes, even on public networks. Follow the article to create your V…
- [Securing your Cloud VPN using IP Access Control Lists (ACLs)](https://docs.nexcess.com/hosting/portal/account/account-security/securing-your-cloud-vpn-using-acls.md): Improve Cloud VPN security by enabling Two-Factor Authentication and setting ACLs. Add, edit, or remove IP addresses in the Users section of your Liquid Web Acc…
- [Recovering a Forgotten Password or Username](https://docs.nexcess.com/hosting/portal/account/account-security/account-recovery.md): Forgot your Liquid Web password? Learn how to reset your password or recover a lost username quickly via the portal.nexcess.com portal.
- [Enabling Two-factor Authentication (2FA) for CloudVPN](https://docs.nexcess.com/hosting/portal/account/account-security/enabling-two-factor-authentication-2fa-for-cloudvpn.md): Enable two-factor authentication (2FA) for CloudVPN by logging into the Liquid Web Portal, navigating to users, enabling 2FA for a VPN user, and verifying the s…
- [Creating a Liquid Web Cloud API Token in the portal.nexcess.com Interface](https://docs.nexcess.com/hosting/portal/account/account-security/creating-a-liquid-web-cloud-api-token-in-the-my-liquidweb-interface.md): Learn how to create a Liquid Web Cloud API token to manage your account and integrate third-party tools like Terraform from outside the My Liquid Web interface.
- [Disable DNS Zone Transfers](https://docs.nexcess.com/hosting/portal/domains-and-dns/dns-management/disable-dns-zone-transfers.md): DNS zone transfers aid in managing redundant DNS servers, but if your LiquidWeb server isn't a DNS server, they pose a security risk. Best practice is to disabl…
- [What is the DMCA?](https://docs.nexcess.com/sites-stores/portal/support-center/management-and-support-levels/what-is-the-dmca.md): The Digital Millennium Copyright Act Policy (“DMCA”) was enacted by the United States in 1998 to protect intellectual property rights on the Internet with regar…
- [Finding your server password](https://docs.nexcess.com/hosting/portal/servers/finding-your-server-password.md): Easily retrieve your lost server password via Liquid Web’s portal under Servers > Password and Username.
- [How to Enable Auto-Updates for Plugins and Themes](https://docs.nexcess.com/sites-stores/managed-woocommerce/plugin-management/enable-auto-updates-for-plugins-and-themes.md): The auto-updates feature introduced in WordPress 5.5 is very easy and supports plugins and themes that are on WordPress.org — if you do not want to use the alte…
- [Locating your WordPress FTP Secure credentials for using FTPS with Nexcess](https://docs.nexcess.com/sites-stores/managed-woocommerce/file-management/ftp-credentials.md): Using FTPS, you can connect and transfer files securely between your Nexcess website host and your PC.
- [Changing passwords for MariaDB users in the Nexcess Cloud](https://docs.nexcess.com/sites-stores/managed-woocommerce/database-management/change-mariadb-mysql-passwords.md): Nexcess Cloud web hosting plans provide a great way to manage your website databases and database MariaDB users from the Nexcess Client Portal. Learn more in th…
- [How to Enable Let’s Encrypt for Managed WordPress or WooCommerce](https://docs.nexcess.com/sites-stores/managed-woocommerce/store-management/enable-lets-encrypt.md): Learn how to enable Let's Encrypt, a type of self-generated SSL certificate available for Nexcess Managed WordPress and Managed WooCommerce clients.
- [Unblock site/block site with password protection for dev and staging environments](https://docs.nexcess.com/sites-stores/managed-woocommerce/store-management/password-protect-dev-or-staging.md): How do you restrict access to your development or staging website created for testing purposes? The answer is password protection — used as a way to block a sit…
- [Nexcess Cloud — scheduling cron jobs](https://docs.nexcess.com/sites-stores/managed-woocommerce/store-management/cron-jobs.md): Scheduling cron jobs in Linux allows you to automate website administration tasks by choosing when the server does a specific action. Let's go over how Nexcess…
- [How to install ImunifyAV](https://docs.nexcess.com/hosting/security/antivirus/how-to-install-imunifyav.md): Learn how to install ImunifyAV, a free malware scanner for Linux servers.
- [Antivirus](https://docs.nexcess.com/hosting/security/antivirus.md): Defend your server against malware with our antivirus guides. Learn how to install, configure, and manage ESET, ClamAV, ImunifyAV, and Imunify360.
- [ESET Antivirus Engine Updates](https://docs.nexcess.com/hosting/security/antivirus/eset-antivirus-engine-updates.md): Keep your Windows server secure. Learn how Liquid Web manages ESET Antivirus definition, build, and version updates, or how to update manually.
- [Adjusting LFD Notifications for Load Levels](https://docs.nexcess.com/hosting/security/firewall-management/configserver-security-firewall-csf/adjusting-lfd-notifications-for-load-levels.md): LFD monitors server security and load levels. Adjust PT_Load_Level in WHM to prevent false positives by matching it to the server's CPU cores.
- [What Are Webcrawlers and robots.txt?](https://docs.nexcess.com/hosting/security/bot-management/what-are-webcrawlers-and-robots-txt.md): Web crawlers populate search engine databases, indexing websites for search results. They vary in behavior and pace. The robots.txt file guides them, indicating…
- [Troubleshooting bot access issues](https://docs.nexcess.com/hosting/security/bot-management/troubleshooting-bot-access-issues.md): Search bots blocked? Troubleshoot `robots.txt` issues & CSF IP blocks (ModSecurity). Guide: check perms, unblock IPs & whitelist trusted bots.
- [Rate-Limiting](https://docs.nexcess.com/hosting/security/bot-management/rate-limiting.md): Control traffic and stop bad bots with rate-limiting. Learn how to limit request volume to protect your site from attacks and improve performance.
- [Bots and their Impact](https://docs.nexcess.com/hosting/security/bot-management/bots-and-their-impact.md): Bots are automated programs that can help or harm your site. Learn what bots are, how they work, and how to tell the good from the bad.
- [Bot Management](https://docs.nexcess.com/hosting/security/bot-management.md): Learn to manage web bots. Our guides help you block bad bots, allow good ones, and secure your site. Control your website's automated traffic.
- [Best Practices: Protecting Your Website from Compromise](https://docs.nexcess.com/hosting/security/best-practices-protecting-your-website-from-compromise.md): To enhance security, adopt best practices to safeguard your website. Consider Liquid Web's additional security services for added protection.
- [Best Practices: Protecting Your Email Accounts from Compromise](https://docs.nexcess.com/hosting/security/best-practices-protecting-your-email-accounts-from-compromise.md): You've learned about computer security, website protection, and secure passwords. Now, safeguard your email accounts from compromise.
- [Using ESET Antivirus for Windows](https://docs.nexcess.com/hosting/security/antivirus/using-eset-antivirus-for-windows.md): Liquid Web provides fully-managed anti-virus ESET for Windows servers. It's monitored, updated, and conducts real-time scans, offering protection.
- [Using FirewallD on CentOS 7](https://docs.nexcess.com/hosting/security/firewall-management/using-firewalld-on-centos-7.md): Secure your CentOS 7 server with FirewallD. Learn how to easily start, stop, enable, disable, and check the status of this dynamic firewall via SSH.
- [Unblocking an IP Address or Opening a Port in the Firewall](https://docs.nexcess.com/hosting/security/firewall-management/unblocking-an-ip-address-or-opening-a-port-in-the-firewall.md): If an IP address has been blocked by the firewall on your cPanel VPS server unexpectedly, you can quickly resolve the issue yourself with just a little help.
- [Opening and Closing Firewall Ports](https://docs.nexcess.com/hosting/security/firewall-management/opening-and-closing-firewall-ports.md): Protect your server by managing network traffic. Learn how to safely open and close incoming and outgoing TCP firewall ports using CSF in WHM.
- [How to Start and Enable Firewalld on Fedora 23](https://docs.nexcess.com/hosting/security/firewall-management/how-to-start-and-enable-firewalld-on-fedora-23.md): As a matter of following security best practices, you should protect your server with a firewall. Fedora 23 and CentOS 7 come with firewalld, an alternative to…
- [Find (View) Default Zone for Firewalld on CentOS 7](https://docs.nexcess.com/hosting/security/firewall-management/find-view-default-zone-for-firewalld-on-centos-7.md): Zones enhance an administrator's capability to define trusts and restrict network traffic. Learn how to find the default zone in Firewalld on CentOS 7 via the c…
- [ConfigServer Security & Firewall (CSF)](https://docs.nexcess.com/hosting/security/firewall-management/configserver-security-firewall-csf.md): Harden your Linux server with CSF. Our guides show you how to install, configure, and manage this powerful firewall and security application.
- [Installing an SSL Certificate in Linux Command Line](https://docs.nexcess.com/hosting/security/ssl/installing-an-ssl-certificate-in-linux-command-line.md): Secure your site with an SSL certificate. Follow our step-by-step guide to obtain and install a Liquid Web SSL on a core or self-managed Linux server.
- [Install an SSL Certificate](https://docs.nexcess.com/hosting/security/ssl/install-an-ssl-certificate.md): Learn how to install your SSL certificate. This guide covers the final step of securing your site after you have generated a CSR and ordered your SSL.
- [How to renew an SSL certificate (a paid SSL cert)](https://docs.nexcess.com/hosting/security/ssl/how-to-renew-ssl-certificate.md): Metaphorically, SSL certificates are like the bodyguards of your website. In this guide, we'll show you how to renew an SSL certificate, no matter what kind of…
- [Generating an SSL Certificate Signing Request (CSR) from Command Line](https://docs.nexcess.com/hosting/security/ssl/generating-an-ssl-certificate-signing-request-csr-from-command-line.md): Generating a CSR for your SSL order in cPanel is straightforward. For Core-Managed or Self-Managed servers, we provide Command Line instructions.
- [Generating an SSL Certificate Signing Request (CSR)](https://docs.nexcess.com/hosting/security/ssl/generating-an-ssl-certificate-signing-request-csr.md): Generate a Certificate Signing Request (CSR) for your SSL. Find step-by-step guides for cPanel, Plesk, InterWorx, Cloud Sites, and command line.
- [Forcing SSL Connections Using .htaccess](https://docs.nexcess.com/hosting/security/ssl/forcing-ssl-connections-using-htaccess.md): For a secure connection, use .htaccess rules to redirect insecure traffic from http://mysite.com to https://mysite.com, assuming you have an SSL installed. Fami…
- [AutoRenew for SSL Certificates](https://docs.nexcess.com/hosting/security/ssl/autorenew-for-ssl-certificates.md): Maintaining website security includes renewing SSL certificates regularly to encrypt server-customer communications. Liquid Web streamlines this process with Au…
- [PCI Compliance FAQ](https://docs.nexcess.com/hosting/security/security-compliance/pci-compliance-faq.md): Why did your PCI scan fail? Is it a false positive? Our FAQ answers common questions about PCI compliance scans and what the results really mean.
- [How to use the Liquid Web Secure Password Generator](https://docs.nexcess.com/hosting/security/how-to-use-the-nexcess-secure-password-generator.md): Learn how to use the Liquid Web Secure Password Generator to create a secure password or evaluate one. It is critical that you use a complex, secure password to…
- [Scoping Ports in Windows Firewall](https://docs.nexcess.com/hosting/security/firewall-management/windows-firewall/scoping-ports-in-windows-firewall.md): Security is paramount in today's digital landscape. Scope Windows Firewall ports to allow only trusted IP addresses for added protection.
- [Firewall Management](https://docs.nexcess.com/hosting/security/firewall-management.md): A firewall is your server's first defense. Learn how firewalls block threats, the types available, and how to configure them for robust security.
- [What Is Let’s Encrypt? Your Guide to Free, Automated SSL](https://docs.nexcess.com/hosting/security/ssl/lets-encrypt.md): Secure your site with a free SSL. Our guide explains what Let's Encrypt is, how it works, and how it automatically renews your certificate.
- [What Is an SSL Certificate?](https://docs.nexcess.com/hosting/security/ssl/what-is-an-ssl-certificate.md): Websites often use TLS (Transport Layer Security) for security, but SSL (Secure Socket Layers) is still used interchangeably. It secures data via encryption key…
- [What is a premium SSL certificate?](https://docs.nexcess.com/sites-stores/security/ssl/premium-ssl-certificates.md): The premium SSL certificate is an enhanced form of the standard SSL certificate used by ecommerce websites for a higher warranty level and additional validation…
- [Verify an SSL Certificate](https://docs.nexcess.com/hosting/security/ssl/verify-an-ssl-certificate.md): When setting up SSL for your site, you must verify your ownership. This article guides you through the verification process.
- [Use Let’s Encrypt for SSL Encryption with Plesk](https://docs.nexcess.com/hosting/security/ssl/use-lets-encrypt-for-ssl-encryption-with-plesk.md): Learn how to install a free Let's Encrypt SSL certificate on Plesk servers. This guide shows adding the extension to secure your domain.
- [Troubleshooting: Your Connection Is Not Private/Secure/Trusted](https://docs.nexcess.com/hosting/security/ssl/troubleshooting-your-connection-is-not-private-secure-trusted.md): Seeing a privacy error for cPanel, WHM, or Plesk? Your server is likely using a self-signed SSL certificate, which browsers don't automatically trust.
- [Troubleshooting: SSL Errors](https://docs.nexcess.com/hosting/security/ssl/troubleshooting-ssl-errors.md): Troubleshoot common SSL errors on your website. Learn how to fix mixed content warnings, expired certificates, self-signed errors, and mismatched domains.
- [Renewing an SSL Certificate](https://docs.nexcess.com/hosting/security/ssl/renewing-an-ssl-certificate.md): All SSL certificates eventually expire. This guide walks you through the renewal process, which is very similar to ordering a brand new certificate.
- [How to install SSL certificates in Nexcess Cloud](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/install-ssl-certificates.md): Learn how to use the Nexcess Client Portal to install your previously purchased SSL certificate so that it applies to your Nexcess Cloud service.
- [How to import SSL certificates in your Nexcess Client Portal](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/store-ssl-certificates.md): Learn how to use your Nexcess Client Portal to import your previously purchased SSL certificates.
- [How to generate a CSR in Nexcess Cloud](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/generate-a-csr.md): How Nexcess Cloud clients can generate a CSR for use when applying for SSL certificates.
- [Enable Let’s Encrypt for Sites and Stores](https://docs.nexcess.com/hosting/security/ssl/nexcess/enable-lets-encrypt.md): Learn how to enable and manage free, automated Let’s Encrypt SSL certificates for your site and pointer domains via the Liquid Web portal dashboard.
- [Nexcess SSL Certificates](https://docs.nexcess.com/sites-stores/security/ssl/nexcess.md): Secure your site with free, automated SSL certificates on the Nexcess platform. Learn how to enable HTTPS for your domain directly from your portal.
- [What is “Least Privilege”?](https://docs.nexcess.com/hosting/security/what-is-least-privilege.md): Secure your server using the Principle of Least Privilege (PoLP). Learn how restricting user access prevents malware and how to manage file permissions.
- [What are CVEs and How are They Scored?](https://docs.nexcess.com/hosting/security/what-are-cves.md): Common Vulnerabilities and Exposures listings, or CVEs, is a system of classifying vulnerabilities including a numeral score describing its severity.
- [Using cPHulk to Prevent Brute-Force Attacks](https://docs.nexcess.com/hosting/security/using-cphulk-to-prevent-brute-force-attacks.md): cPHulk is an added security feature in WHM, blocking login attempts in various services without affecting regular traffic.
- [Managing TLS protocols and cipher suites on your server](https://docs.nexcess.com/hosting/security/tls-hardening/managing-tls-protocols-and-cipher-suites-on-your-server.md): Learn how to configure TLS/SSL protocols and ciphers for Apache, FTP, and email on cPanel, Plesk, & InterWorx servers to enhance security and meet PCI complianc…
- [TLS Hardening](https://docs.nexcess.com/hosting/security/tls-hardening.md): Go beyond basic SSL. TLS hardening strengthens your server's encryption by disabling weak protocols and ciphers to protect against modern attacks.
- [SSL Certificates Guide](https://docs.nexcess.com/hosting/security/ssl.md): Secure your site with SSL. Our guides explain what SSL certificates are, how to install them, and how to build trust by encrypting user data.
- [Changing your SSH port with the command line](https://docs.nexcess.com/hosting/server-administration/linux/changing-your-ssh-port-with-the-command-line.md): Change default ports like SSH (port 22) to enhance server security. This reduces vulnerability to common attacks and deters scanning by malicious programs.
- [Setting Up Alternate SSH Users](https://docs.nexcess.com/hosting/server-administration/linux/setting-up-alternate-ssh-users.md): Enhance server security by disabling root SSH access and granting users 'superuser (su)' access for an additional layer of authentication.
- [Change a MySQL User Password](https://docs.nexcess.com/hosting/server-administration/database-management/mariadb-mysql/change-a-mysql-user-password.md): Changing MySQL passwords to something new and secure is easy via the command line.
- [Adding Remote Desktop Users](https://docs.nexcess.com/hosting/server-administration/windows/adding-remote-desktop-users.md): Need to give another user RDP access to your Windows server? Our guide walks you through creating a user and adding them to the Remote Desktop Users group.
- [Using the MAD (Malicious Activity Detection) Interface](https://docs.nexcess.com/hosting/server-administration/windows/using-mad.md): Protect your Windows server from brute force attacks with our free MAD software. It now includes a graphical interface so you can easily manage its settings.
- [Resetting Passwords in ADAAS](https://docs.nexcess.com/hosting/server-administration/windows/resetting-passwords-in-adaas.md): With Active Directory as a Service (ADAAS), you can reset passwords and unlock users yourself. Our guide shows you how to manage users from your server.
- [Installing an SSL Certificate on a Windows Core Managed Server](https://docs.nexcess.com/hosting/server-administration/windows/installing-an-ssl-certificate-on-a-windows-core-managed-server.md): Installing SSL on a Core-Managed server involves CSR creation, SSL acquisition, certificate completion, and binding to the website(s).
- [Forcing SSL Connections on Windows Servers](https://docs.nexcess.com/hosting/server-administration/windows/forcing-ssl-connections-on-windows-servers.md): To ensure every website visitor uses a secure (SSL) connection, adjust IIS to redirect http://mysite.com to https://mysite.com. This article explains how.
- [Configure Cloud VPN on Windows](https://docs.nexcess.com/hosting/server-administration/windows/configure-cloud-vpn-on-windows.md): Using a VPN to connect to your server? Liquid Web offers a cloud vpn solution for connecting to your server securely. Get directions for installing and configur…
- [Recovering a Forgotten Nexcess Password or Username](https://docs.nexcess.com/sites-stores/account/account-security/credentials.md): Forgot your Nexcess password? Learn how to reset or recover your password quickly via the sites-portal.nexcess.com portal.
- [How to use the Secure Password Generator](https://docs.nexcess.com/sites-stores/account/account-security/password-generator.md): Learn how to create strong, unique passwords with our generator, evaluate password strength, and use password managers and two-factor authentication.
- [Enable Two-Factor Authentication in the Nexcess Portal](https://docs.nexcess.com/sites-stores/account/account-security/two-factor-authentication.md): Protect your Nexcess account. Learn how to easily enable Two-Factor Authentication (2FA) with Google Authenticator or Duo Mobile.
- [How to Use the Nexcess Client Portal API Token](https://docs.nexcess.com/sites-stores/account/account-security/api-tokens.md): In this article we will go into what API tokens are, how they are used, and how you can create your own for interfacing with the Nexcess Client Portal programma…
- [Locating your FTPS credentials for Nexcess Cloud](https://docs.nexcess.com/sites-stores/managed-wordpress/file-management/ftp-accounts.md): Credentials for FTPS access are available and are found within each service plan’s dashboard. This article will walk you through the steps to find your FTPS log…
- [Locating your SSH/SFTP Credentials for your Nexcess Cloud Account](https://docs.nexcess.com/sites-stores/managed-magento/store-management/ssh-sftp-credentials.md): Regarding hosting plans for your Nexcess Cloud account, credentials for Secure Shell (SSH) and SSH FTP (SFTP) access via command line are generated and viewed w…
- [How existing customers order SSL certificates in the Nexcess Client Portal](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/order-an-ssl-certificate.md): Are you an existing customer of a Nexcess hosting product? If so, are you looking to order an SSL certificate through the Nexcess Client Portal? Here is your gu…
- [How to buy wildcard SSL certificate in SiteWorx](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/wildcard-ssl-certificates.md): Learn how to buy wildcard SSL certificate in SiteWorx.
- [What is an extended validation (EV) SSL certificate?](https://docs.nexcess.com/sites-stores/security/ssl/extended-validation-ev-ssl-certificate.md): Extended Validation (EV) SSL Certificates function as the highest class of SSL certificates, activating both the padlock and the legal identity field in most br…
- [What is GDPR?](https://docs.nexcess.com/hosting/security/security-compliance/what-is-gdpr.md): What is GDPR and does it apply to you? Learn about this EU data protection law and find resources to help with your own compliance obligations.
- [Malware remediation service for managed WordPress/WooCommerce sites](https://docs.nexcess.com/sites-stores/hosting-services/sites-and-stores/malware-remediation-for-wordpress-and-woocommerce.md): Learn about the malware remediation service from Nexcess. Let us get your site back up and running fast. Our experts will keep your site running malware-free.
- [Best Practices: Creating a Secure Password](https://docs.nexcess.com/hosting/security/best-practice-creating-a-secure-password.md): Secure your website and logins. Learn the rules for creating a long, complex, and unique password and find the best practices for storage.
- [Password Help](https://docs.nexcess.com/hosting/security/password-help.md): Find guidance on managing passwords for your Liquid Web systems.
- [What to Do If Your StellarSite Gets Infected With Malware](https://docs.nexcess.com/sites-stores/stellarsites/what-to-do-if-your-stellarsite-gets-infected-with-malware.md): Malware on your site? Yeah—it’s the worst. But don’t panic.StellarSites is designed to keep your site safe with built-in backups, hardened security, and smart d…
- [How to configure web hosting teams in the Nexcess Client Portal](https://docs.nexcess.com/sites-stores/account/account-security/configure-teams-and-permission-levels.md): In this article we will discuss how to configure web hosting teams that include team members with different roles and permissions in the Nexcess Client Portal.
- [Imunify360: Quick Reference Guide](https://docs.nexcess.com/hosting/security/antivirus/imunify360-quick-reference-guide.md): This guide provides a quick reference for Imunify360, covering its features, installation, command-line usage, uninstallation, and troubleshooting common confli…
- [Security Overview](https://docs.nexcess.com/hosting/security.md): Robust solutions for data protection and server security.
- [Third-party malware removal services](https://docs.nexcess.com/sites-stores/hosting-services/sites-and-stores/third-party-malware-removal.md): Learn more about third-party companies who specialize in helping site owners remove malware and deal with any after-effects caused by the site being compromised…
- [What is a Firewall?](https://docs.nexcess.com/hosting/security/firewall-management/what-is-a-firewall.md): A firewall is like a security guard for your server. It checks all network traffic against a list of rules to block unauthorized access.
- [Comodo UserTrust Subscriber Agreement](https://docs.nexcess.com/hosting/hosting-services/comodo-usertrust-subscriber-agreement.md): The Comodo UserTrust Subscriber Agreement is a binding legal document detailing your rights and obligations as a user of the Comodo UserTrust logo and services.
- [FileZilla & FTP Clients: Transfer Files Using SFTP](https://docs.nexcess.com/sites-stores/managed-magento/file-management/transfer-files-with-sftp.md): This article will help you understand how to transfer files with SFTP, or SSH (or secure) file transfer protocol, which encrypts files as they are being transmi…
- [Adding Custom RBLs](https://docs.nexcess.com/hosting/email/spam/adding-custom-rbls.md): Minimize spam by adding custom RBLs in WHM or Plesk. Learn how to add, enable, and test new remote block lists on your server.
- [Changing cPanel Passwords in WHM](https://docs.nexcess.com/hosting/control-panel/whm/security/changing-cpanel-passwords-in-whm.md): With root WHM access, you can change any cPanel user's password without knowing the old one. This also updates their email, FTP, and SSH passwords.
- [Adding Firewall Rules in Plesk](https://docs.nexcess.com/hosting/control-panel/plesk/security/adding-firewall-rules-in-plesk.md): Windows servers using Plesk can use firewall rules to manage help manage server traffic. You can also add firewall rules using Windows Firewall, but adding fire…
- [Deleting Users in Linux](https://docs.nexcess.com/hosting/server-administration/linux/deleting-users-in-linux.md): If you've added multiple users to your Linux server, you might eventually need to delete users, too. You can delete users in two ways, from cPanel and from the…
- [What is Server Hardening?](https://docs.nexcess.com/hosting/security/what-is-hardening-your-server.md): Server hardening strengthens security by enhancing various aspects, making your environment far more secure. Default configurations prioritize usability and fun…
- [Using ClamAV for Virus Protection](https://docs.nexcess.com/hosting/security/antivirus/using-clamav-for-virus-protection.md): ClamAV is a robust antivirus tool that scans your server for malicious files and email attachments, enhancing your security measures.
- [Best Practices: Setting a Required Password Strength](https://docs.nexcess.com/hosting/security/best-practices-setting-a-required-password-strength.md): A strong server password is crucial to prevent data loss. Use a mix of characters, avoid dictionary words, and lengthen your password. Consider setting a server…
- [What Is a Brute-Force Attack?](https://docs.nexcess.com/hosting/security/what-is-a-brute-force-attack.md): Brute-Force Attacks: Attackers try all possible password combinations, using scripts, to access data. Growing threat due to faster hardware.
- [Change Your RDP Password](https://docs.nexcess.com/hosting/server-administration/windows/change-your-rdp-password.md): Learn to change your RDP administrator password for enhanced security.
- [Using AnyConnect with your hardware firewall](https://docs.nexcess.com/hosting/security/firewall-management/using-anyconnect-with-your-hardware-firewall.md): A corporate VPN secures remote access, encrypts data, prevents cyberattacks, and ensures compliance. It also enhances server management by restricting access to…
- [Change a MySQL User Password via cPanel](https://docs.nexcess.com/hosting/control-panel/whm/cpanel/database-management/change-a-mysql-user-password-via-cpanel.md): If you aren't familiar with using the command line interface, using cPanel makes it easy to change MySQL user passwords.
- [Account Security](https://docs.nexcess.com/hosting/portal/account/account-security.md): Secure your digital assets. Learn to enable 2FA, manage user permissions, use SSH keys, and fortify your Liquid Web account from threats.
- [Rootkit Detection](https://docs.nexcess.com/hosting/security/rootkit-detection.md): Rootkits are stealthy malware that hide deep in your OS. Learn how to use specialized tools to detect and remove these dangerous hidden threats.
- [Security Compliance](https://docs.nexcess.com/hosting/security/security-compliance.md): Navigate security compliance. Learn about HIPAA, PCI, and GDPR and find hosting solutions to help protect sensitive data and meet your legal duties.
- [Cloud Firewall](https://docs.nexcess.com/hosting/security/firewall-management/cloud-firewall.md): Use our Cloud Firewall to block threats before they reach your server. Learn to configure rules, manage ports, and enhance your cloud security.
- [Malware Scanning with ConfigServer eXploit Scanner (CXS)](https://docs.nexcess.com/hosting/security/firewall-management/configserver-exploit-scanner-cxs.md): Actively scan file uploads for malware with CXS. Learn to install, configure, and use this tool to block exploits before they can infect your site.
- [Windows Firewall](https://docs.nexcess.com/hosting/security/firewall-management/windows-firewall.md): Secure your server with Windows Firewall. Our guides show you how to open ports, manage IP rules, and configure this built-in security tool.
- [Security in cPanel](https://docs.nexcess.com/hosting/control-panel/whm/cpanel/security.md): Your guide to cPanel security. Learn to install SSL certificates, block malicious IPs, enable 2FA, and protect your site's content.
- [How to install SSL certificates in SiteWorx](https://docs.nexcess.com/sites-stores/control-panel/interworx/siteworx/website-management/install-an-ssl-certificate.md): Install a pre-purchased SSL on your physical Nexcess server using SiteWorx. This guide shows how to install your private key, certificate, and chain file.
- [What are the advantages of using SSH keys to control access for multiple users?](https://docs.nexcess.com/sites-stores/security/ssh-keys-for-access-control.md): SSH keys offer a means for site administrators to allow multiple individuals to share one user and all associated permissions while remaining PCI-compliant.
- [How to Change SSH Passwords From the CLI](https://docs.nexcess.com/sites-stores/server-administration/linux/change-your-server-password.md): Read this article to learn how to change SSH passwords for your server from the CLI, provided you have SSH access.
- [What Is Secure Shell (SSH)?](https://docs.nexcess.com/hosting/server-administration/linux/what-is-secure-shell-ssh.md): Secure Shell (SSH) enables secure computer connections through public-key cryptography, facilitating safe file transfers and remote computer access.
- [Best Practices: Securing Your Computer](https://docs.nexcess.com/hosting/security/best-practices-securing-your-computer.md): Securing your passwords and data is vital for site security. Protect your computer, keep software updated, and safeguard login credentials to prevent common sit…
- [How to renew your SSL certificate](https://docs.nexcess.com/sites-stores/security/ssl/nexcess/ssl-renewals.md): With Nexcess website hosting, learn how we help our clients renew their SSL certificates.
- [ConfigServer eXploit Scanner (CXS): your website’s security watchdog](https://docs.nexcess.com/hosting/security/firewall-management/configserver-exploit-scanner-cxs/configserver-exploit-scanner.md): CXS is your server's watchdog, scanning for malware, quarantining threats, and monitoring files in real-time to keep your website secure.
- [DNSSEC](https://docs.nexcess.com/hosting/portal/domains-and-dns/dns-management/dnssec.md): DNSSEC uses public-key cryptography to sign DNS records with private keys and verify them with public keys, ensuring DNS data integrity and authenticity.
- [What is chkrootkit?](https://docs.nexcess.com/hosting/security/rootkit-detection/what-is-chkrootkit.md): chkrootkit scans Linux systems for rootkits and hidden threats. Use it to detect suspicious activity and verify system integrity.
- [Manage your server’s firewall with iptables](https://docs.nexcess.com/hosting/security/firewall-management/iptables-firewall.md): iptables can act as your server's gatekeeper, deciding which network traffic is allowed in, out, or through your server.
- [Using mod_qos and mod_reqtimeout to mitigate Slowloris attacks](https://docs.nexcess.com/hosting/security/using-mod_qos-and-mod_reqtimeout-to-mitigate-slowloris-attacks.md): Protect your Apache server from Slowloris attacks. Learn how to install and configure mod_qos, set up connection limits, and integrate with CSF.
- [What Is a Denial-of-Service (DoS or DDoS) Attack?](https://docs.nexcess.com/hosting/security/what-is-a-denial-of-service-dos-or-ddos-attack.md): Denial-of-Service (DoS) attacks flood a server with traffic, preventing legitimate users from accessing a website. Learn to mitigate network-focused DoS attacks…