Keep software current
Update the website platform, themes, plugins and other application components you use. Remove software you no longer need instead of leaving inactive code installed indefinitely.
Protect account access
- Use a strong, unique password for your hosting account.
- Use different passwords for website administrators and email accounts.
- Remove access that is no longer required.
- Avoid sending passwords through ordinary email or chat.
Use HTTPS
Free SSL is included with current Tanco Tech Hosting plans. Confirm important website pages load through HTTPS without certificate or mixed-content warnings.
Keep recoverable copies
Backups are part of the hosting offer, but business-critical websites should also maintain an additional copy of important files and data before major changes.
Watch for unexpected changes
- Unfamiliar administrator accounts
- Unexpected redirects or pop-ups
- Unknown files or plugins
- Sudden email-sending activity
- Browser security warnings
Contact support early
If you suspect a hosting account has been compromised, avoid making random changes that may destroy evidence or backups. Contact support with the affected domain and a description of what you observed.
Important: No security control eliminates all risk. Strong credentials, current software, SSL, backups and prompt response work best together.