Security Overview

Security isn’t a single setting you flip on once. It’s a process that touches every layer of your stack, from account passwords to network firewalls and SSL/TLS. Our security articles cover four main pillars of security:

Account & Access – lock down logins with strong passwords, two-factor auth, and secure notes.
Network Protection – shield ports with Cloud Firewall rules and VPN tunnels before traffic even hits your server.
Server Hardening & Monitoring – minimize attack surface (services, permissions, file-system tweaks) and run scheduled vulnerability scans.
Encryption & Certificates – keep data in transit private with correctly installed, auto-renewing SSL certificates.

Security Articles

84 results

This collection of articles serves as your central resource for understanding, and managing the security of your Liquid Web account, server and websites.

Defend your server against malware with our antivirus guides. Learn how to install, configure, and manage ESET, ClamAV, ImunifyAV, and Imunify360.

Learn to manage web bots. Our guides help you block bad bots, allow good ones, and secure your site. Control your website's…

Firewall Management

A firewall is your server's first defense. Learn how firewalls block threats, the types available, and how to configure them for robust…

Rootkit Detection

Rootkits are stealthy malware that hide deep in your OS. Learn how to use specialized tools to detect and remove these dangerous…

Security Compliance

Navigate security compliance. Learn about HIPAA, PCI, and GDPR and find hosting solutions to help protect sensitive data and meet your legal…

SSL Certificates Guide

Secure your site with SSL. Our guides explain what SSL certificates are, how to install them, and how to build trust by…

Go beyond basic SSL. TLS hardening strengthens your server's encryption by disabling weak protocols and ciphers to protect against modern attacks.

Articles

A Liquid Web customer’s guide to vulnerability scans

Vulnerability scans are an important part of maintaining your server's security, especially in today's online threat landscape. Learn how to leverage them…

Best Practices: Creating a Secure Password

Secure your website and logins. Learn the rules for creating a long, complex, and unique password and find the best practices for…

Best Practices: Protecting Your Email Accounts from Compromise

You've learned about computer security, website protection, and secure passwords. Now, safeguard your email accounts from compromise.

Best Practices: Protecting Your Website from Compromise

To enhance security, adopt best practices to safeguard your website. Consider Liquid Web's additional security services for added protection.

Best Practices: Securing Your Computer

Securing your passwords and data is vital for site security. Protect your computer, keep software updated, and safeguard login credentials to prevent…

Best Practices: Setting a Required Password Strength

A strong server password is crucial to prevent data loss. Use a mix of characters, avoid dictionary words, and lengthen your password.…

Disabling Anonymous FTP

Protect your server from malicious attacks. Learn how to disable Anonymous FTP logins and uploads in WHM with this quick configuration guide.

Disabling Recursive DNS in BIND

Disabling recursive DNS requests is crucial to prevent amplification attacks.

How to use the Liquid Web Secure Password Generator

Learn how to use the Liquid Web Secure Password Generator to create a secure password or evaluate one. It is critical that…

Find guidance on managing passwords for your Liquid Web systems.

Using cPHulk to Prevent Brute-Force Attacks

cPHulk is an added security feature in WHM, blocking login attempts in various services without affecting regular traffic.

Using mod_qos and mod_reqtimeout to mitigate Slowloris attacks

Protect your Apache server from Slowloris attacks. Learn how to install and configure mod_qos, set up connection limits, and integrate with CSF.

What are CVEs and How are They Scored?

Common Vulnerabilities and Exposures listings, or CVEs, is a system of classifying vulnerabilities including a numeral score describing its severity.

What are the advantages of using SSH keys to control access for multiple users?

SSH keys offer a means for site administrators to allow multiple individuals to share one user and all associated permissions while remaining…

What is “Least Privilege”?

Secure your server using the Principle of Least Privilege (PoLP). Learn how restricting user access prevents malware and how to manage file…

What Is a Brute-Force Attack?

Brute-Force Attacks: Attackers try all possible password combinations, using scripts, to access data. Growing threat due to faster hardware.

What Is a Denial-of-Service (DoS or DDoS) Attack?

Denial-of-Service (DoS) attacks flood a server with traffic, preventing legitimate users from accessing a website. Learn to mitigate network-focused DoS attacks in…

What Is an .htaccess File?

Apache servers use .htaccess files to configure websites without altering server settings. Apply distinct settings per directory via multiple .htaccess files, created…

What is Server Hardening?

Server hardening strengthens security by enhancing various aspects, making your environment far more secure. Default configurations prioritize usability and functionality, not security.