Overview Two-factor authentication (2FA) is a security measure that requires two forms of identification. After you enter your password, you must enter a security code. An application on your smartphone supplies this code. Without your smartphone, you cannot log in. Note 2FA requires a smartphone with a supported time-based one-time password (TOTP) app. We suggest the following …
Overview The SSL/TLS Wizard interface allows you to easily purchase and install SSL certificates for domains on your account. It also lists purchased certificates that an SSL certificate provider has yet to deliver. Note In order for the SSL/TLS Wizard to appear in your cPanel account, your hosting provider must enable the cPanel Store provider in WHM’s Market Provider …
Overview This interface lets you view, upgrade, or renew your domains’ Secure Sockets Layer (SSL) certificates. You can also view a domain’s certificate details. Warning We support Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3: Beginning in cPanel and WHM version 86, we only support TLSv1.2 or newer. The system enables …
Overview The features in this interface allow you to generate and manage SSL certificates, signing requests, and keys, which enhance your website’s security. They are useful for websites that regularly work with sensitive information, such as login credentials and credit card numbers. Encryption protects visitors’ communications from malicious users. Warning We support Transport Layer Security (TLS) …
Overview This interface provides information about how to connect to another web server via the SSH (secure shell) network protocol. The SSH network protocol allows you to connect to another web server over the Internet via a command line interface (CLI). You can use this network protocol to remotely manage your server, configure CGI scripts, …
Overview This interface allows you to update and manage your cPanel account’s security questions. You can also add access IP addresses. When you attempt to log in to your cPanel account from a verified access IP address, the system will not require you to answer the security questions. Your hosting provider may require you to answer these …
Overview Warning We strongly recommend that you enable ModSecurity™ for all of your domains. Only disable ModSecurity while you troubleshoot ModSecurity-related problems. × Dismiss alert This interface allows you to enable or disable ModSecurity for your domains. Note If you cannot access this interface from your cPanel account, ask your hosting provider to perform the following steps in WHM: Enable the mod_security2 setting in the Apache …
Overview Important This functionality is experimental. It may change in future versions. The Unrestricted application programming interface (API) tokens can access API functions that do not have an associated feature. × Dismiss alert This feature lets you create, list, update, and revoke API tokens. The server recognizes API tokens and allows you to run API functions. API functions allow you …
Overview The Leech Protection interface allows you to detect unusual levels of activity in password-restricted directories. After you set the maximum number of logins within a two-hour period, the system redirects or suspends users who exceed it. This is useful if, for example, someone posts a user’s login credentials on a public site. Enable leech protection To …
Overview The IP Blocker interface allows you to block access to your site for one or more IP addresses or fully qualified domain names (FQDNs). Note WHM users can block IP addresses at the server level via the Host Access Control interface (WHM >> Home >> Security Center >> Host Access Control). × Dismiss alert Block an IP address …
