Guides tagged “security”
Step-by-step MdmHost guides about security, sorted A-Z.
193 guides · page 8 of 10
Secure MongoDB Remote Access with bindIp and Authentication
Configure bindIp, enable authorization and restrict port 27017 so MongoDB accepts remote connections from your app server only.
Secure Nginx with a free Let's Encrypt SSL certificate
Install Certbot, issue a free certificate for your domain, redirect HTTP to HTTPS and make sure renewal runs on its own.
Secure Remote Desktop on Windows Server
Stop password-guessing on Remote Desktop with strong passwords, Network Level Authentication, a lockout policy and firewall rules limited to your IP.
Secure your DirectAdmin login: password, 2FA and login keys
Change your DirectAdmin password, enable two-step authentication with an authenticator app, review login history and create limited login keys for the API.
Secure your MdmHost account
Protect your MdmHost account with a strong unique password, a password manager and two-factor authentication, review who can sign in, and learn to spot phishing emails.
Secure your Plesk login: password reset and two-factor authentication
Change or reset your Plesk password, turn on two-factor authentication with an authenticator app, review active sessions and recover access if you lose your phone.
Secure your Virtualizor account with 2FA and SSH keys
Change your Virtualizor panel password, enable two-factor authentication, restrict login IPs, add SSH keys for OS installs and review the panel's login and task logs.
Securing Docker images against vulnerabilities and malware
Scan Docker images for known CVEs and malware, then harden the build and the runtime so a compromised container cannot spread across your VPS.
Securing Windows Server: Hardening the Registry and Services
Reduce the attack surface of a Windows VPS by backing up the registry, applying LSA and SMB hardening, and disabling services you do not use.
Security best practices for WHM resellers
Practical security steps for resellers: protect your WHM login, set safe package defaults, limit email abuse, keep customers updated and respond fast to a hacked account.
SELinux basics on AlmaLinux and Rocky Linux
Understand SELinux modes and contexts on AlmaLinux and Rocky Linux, fix common permission-denied problems with restorecon and booleans, without turning SELinux off.
Set correct WordPress file permissions and ownership
Fix WordPress file permissions on cPanel hosting: the right values for folders, files and wp-config.php, how to apply them in File Manager or SSH, and why 777 is unsafe.
Set up a UFW firewall on Ubuntu and Debian
Set safe defaults, allow SSH before switching UFW on, open only the ports you use, limit sensitive ports to your own IP, and tidy up old rules.
Set up a WireGuard VPN server on a Linux VPS
Install WireGuard on an Ubuntu or Debian VPS, create server and client keys, enable forwarding and NAT, and connect from Windows, macOS or a phone.
Set up SSH keys
Create an SSH key pair, add it to your Linux VPS from macOS, Linux or Windows, and optionally switch off password logins safely.
Softaculous auto-upgrades: keep apps, plugins and themes updated
Configure Softaculous automatic upgrades for WordPress core, plugins and themes, take a backup before each update, upgrade manually and handle failed upgrades.
SSH access in cPanel: generate, import and authorise SSH keys
Connect to your cPanel hosting over SSH with keys: generate or import a key in cPanel SSH Access, authorise it, and connect from Windows, macOS or Linux.
SSH Hardening: Auditing and Limiting Shell Access for Service Accounts
Audit every Linux account that has a login shell, move service accounts to nologin, and restrict SSH with AllowGroups and Match blocks so only people who need a session get one.
SSH Hardening: Auditing and Restricting Authorized Keys for Critical Services
Find every authorized_keys file on your Linux VPS, validate each key, and apply strict per-key restrictions so only the access you intend is possible.
SSH Hardening: Enforcing Key Rotation Policies for Automated Security
SSH key rotation replaces long-lived credentials before they become a permanent backdoor. This guide covers expiry dates in authorized_keys, a rotation script and auditing.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.69 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.37 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.49 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.40 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.37 guides
- DomainsRegistering, transferring and managing domains and nameservers.20 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.19 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.30 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.23 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.23 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.7 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.30 guides
- PleskWebsites, email, databases and settings in the Plesk panel.52 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.40 guides
- WHMCSBilling, automation, products and client management with WHMCS.51 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.106 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.115 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.34 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.52 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.64 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.68 guides
- Linux VPSSSH, packages, services and everyday Linux administration.70 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.58 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.58 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.