Articles
Protecting the Email Address Used for Account Recovery
Why this mattersControl of the recovery mailbox helps protect access to the hosting account.Step...
Choosing Unique Passwords for Hosting Access
Why this mattersReusing one password across portal, website and email increases the impact of a...
Checking Whether Additional Login Verification Is Available
Why this mattersAn extra authentication step can reduce dependence on the password alone.Step by...
Recognising a Suspicious Hosting Payment Email
Why this mattersAn urgent message can imitate a real invoice while directing payment...
Checking a Login Link Before Entering Credentials
Why this mattersSimilar-looking hostnames can misdirect users to a false login page.Step by...
What to Do If You Suspect Unauthorised Account Access
Why this mattersQuickly preserving evidence and limiting access is more useful than making...
Reporting an Exposed Password or API Secret
Why this mattersDeleting a visible secret does not make the original credential safe again.Step...
Keeping Backup Archives Out of Public Website Folders
Why this mattersA complete backup may contain customer data, configuration and credentials.Step...
Reviewing File Permissions Without Opening the Whole Site
Why this mattersOverly broad write permissions can expose application files to unnecessary...
Giving Collaborators Limited Access
Why this mattersA maintenance task rarely requires unrestricted access to every customer...
Removing Access After Staff or Supplier Changes
Why this mattersOld accounts and shared credentials can outlive the business relationship.Step by...
Preparing a Security Ticket Without Leaking Evidence
Why this mattersIncident evidence can itself contain information that must remain private.Step by...
Responding to a Browser Malware or Phishing Warning
Why this mattersA warning deserves investigation rather than instructing visitors to bypass...
Keeping Applications and Extensions Maintained
Why this mattersUnsupported components can leave known issues unresolved even when the website...
Sharing Diagnostic Screenshots Safely
Why this mattersA full screen can reveal another person’s data or a reusable access link.Step by...
Checking Unexpected Account Invitations
Why this mattersA genuine invitation still needs an authorised business purpose.Step by...
Understanding Portal Security and Website Security as Separate Layers
Why this mattersProtecting a hosting login does not automatically secure every application on the...
Planning Recovery After a Security Incident
Why this mattersRestoring an old copy without addressing the cause can reintroduce the same...
Distinguishing a Missing Permission from a Security Failure
Why this mattersA denied action can be an intentional protection rather than a broken...
Maintaining a Practical Account Security Review
Why this mattersPeriodic review can identify obsolete access and incomplete recovery...
A Screenshot Exposed a Private Support Ticket Link
A ticket link can contain information intended for the customer and support team. Removing the...
