Your client account controls your websites, email and domains. A few habits keep it, and them, safe.
Passwords
- Use a long, unique password for the client area: not the password of an email account, and nowhere else.
- Give each email account its own password too. Strong passwords are required when you create or change one.
- A password manager makes this easy: see Bitwarden password manager.
Watch for warning signs
- The Logins tab of the mail log shows logins to your email accounts and failed attempts, with IP addresses. Many failures for one account mean someone is guessing: choose a new, strong password.
- The Sent messages in the mail log show what your accounts sent. Messages you did not write mean the account is being misused: change its password at once and contact us.
- Unexpected changes on your website, or new files you did not upload, can mean a break-in through an outdated plugin: see WordPress on our hosting.
SSH keys
Keep private keys on your own devices, protect them with a passphrase, and remove keys of lost or old computers under SFTP and SSH keys: see Create an SSH key and add it to your account.
Emails that ask for passwords
We never ask for your passwords or keys, by email or otherwise. Messages that do, or that urge you to "verify" your account through a link, are phishing: do not click, forward them to us and delete them. When in doubt, sign in to the client area by typing client.maplegrovehosting.com yourself.
Your contact details
Keep the email address of your client account current: we send invoices, renewal reminders and important notices there.