{"id":3852,"date":"2016-05-02T14:24:09","date_gmt":"2016-05-02T14:24:09","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/2016\/05\/02\/how-to-configure-security-settings-in-whmcs\/"},"modified":"2023-06-08T11:52:44","modified_gmt":"2023-06-08T15:52:44","slug":"how-to-configure-security-settings-in-whmcs","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/","title":{"rendered":"How to Configure Security Settings in WHMCS"},"content":{"rendered":"<p>WHMCS provides a variety of security options that range from beginner to advanced. Here is an overview of the primary security features you can access through the general settings.<\/p>\n<ol class=\"article_list\">\n<li><a href=\"\/support\/edu\/whm\/login-to-whmcs\/\">Login to your WHMCS Admin<\/a><\/li>\n<li><a href=\"\/support\/images\/stories\/reseller\/general-settings-whmcs\/Tooltip_043.png\" rel=\"lightbox-0\"><img decoding=\"async\" class=\"std_ss\" src=\"\/support\/images\/stories\/reseller\/general-settings-whmcs\/Tooltip_043.png\" alt=\"General Settings under Setup\" style=\"float:right; margin:0px 15px 15px 15px;\"><\/a>\n<div style=\"clear:both;\"><\/div>\n<p>Hover over <em>Setup<\/em> and choose <em>General Settings<\/em><\/p>\n<div style=\"clear:both;\"><\/div>\n<\/li>\n<li><a href=\"\/support\/images\/stories\/reseller\/general-settings-whmcs\/Selection53.png\" rel=\"lightbox-0\"><img decoding=\"async\" class=\"std_ss\" src=\"\/support\/images\/stories\/reseller\/general-settings-whmcs\/Selection53.png\" alt=\"Security tab\" style=\"float:right; margin:0px 15px 15px 15px;\"><\/a>\n<div style=\"clear:both;\"><\/div>\n<p>Choose the <em>Security<\/em> tab<\/p>\n<div style=\"clear:both;\"><\/div>\n<\/li>\n<li>Fill in the settings:<br>\n<table class=\"table table-striped table-bordered\" style=\"text-align:left;\">\n<tr>\n<th>Captcha Form Protection:<\/th>\n<td>Choose how captcha functions<\/td>\n<\/tr>\n<tr>\n<th>Captcha Type:<\/th>\n<td>Select the type you wish to use<\/td>\n<\/tr>\n<tr>\n<th>reCAPTCHA Public Key:<\/th>\n<td>You need to register for reCAPTCHA @ https:\/\/www.google.com\/recaptcha\/admin\/create<\/td>\n<\/tr>\n<tr>\n<th>reCAPTCHA Private Key:<\/th>\n<td>You need to register for reCAPTCHA @ https:\/\/www.google.com\/recaptcha\/admin\/create<\/td>\n<\/tr>\n<tr>\n<th>Required Password Strength:<\/th>\n<td>Enter the required password strength from 1 to 100 \u2013 Enter 0 to Disable<\/td>\n<\/tr>\n<tr>\n<th>Failed Admin Login Ban Time:<\/th>\n<td>Enter the time to ban an IP in minutes after 3 failed login attempts \u2013 Enter 0 to Disable<\/td>\n<\/tr>\n<tr>\n<th>Whitelisted IPs:<\/th>\n<td> IP Addresses exempt from being banned for invalid login attempts <\/td>\n<\/tr>\n<tr>\n<th>Whitelisted IP Login Failure Notices:<\/th>\n<td>Tick to send login failure notices for Whitelisted IP addresses <\/td>\n<\/tr>\n<tr>\n<th>Admin Force SSL Access:<\/th>\n<td>Tick this box to force SSL Access for all admin area requests <\/td>\n<\/tr>\n<tr>\n<th>Disable Admin Password Reset:<\/th>\n<td>Tick this box to disable the forgotten password feature on the admin login page <\/td>\n<\/tr>\n<tr>\n<th>Disable Credit Card Storage:<\/th>\n<td>Tick this box to not store customers credit cards in the database (Warning: This will delete any existing stored credit card data)<\/td>\n<\/tr>\n<tr>\n<th>Allow Client CC Removal:<\/th>\n<td>Tick this box to allow customers to delete the credit card details stored on their account <\/td>\n<\/tr>\n<tr>\n<th>Disable Session IP Check:<\/th>\n<td>This is used to protect against cookie\/session hijacking but can cause problems for users with dynamic IPs <\/td>\n<\/tr>\n<tr>\n<th>Allow Smarty PHP Tags:<\/th>\n<td>Tick to allow use of the Smarty {php} tag in templates. This is considered a security risk.  <\/td>\n<\/tr>\n<tr>\n<th>Proxy IP Header:<\/th>\n<td>   Header used by your trusted proxies to relay IP information. Most proxies use \u201cX_FORWARDED_FOR\u201d; that is the default if no value is specified <\/td>\n<\/tr>\n<tr>\n<th>Trusted Proxies:<\/th>\n<td> IP addresses of trusted proxies that forward traffic to WHMCS. Only add addresses that directly proxy requests! <\/td>\n<\/tr>\n<tr>\n<th>API IP Access Restriction:<\/th>\n<td>\u2013 IP Addresses allowed to connect to the WHMCS API <\/td>\n<\/tr>\n<tr>\n<th>Log API Authentication:<\/th>\n<td>Tick to record successful API authentications in Admin Log<\/td>\n<\/tr>\n<tr>\n<th>CSRF Tokens: General:<\/th>\n<td>Tick to enable general use of CSRF tokens for all public and clientarea forms (Highly Recommended) <\/td>\n<\/tr>\n<tr>\n<th>CSRF Tokens: Domain Checker:<\/th>\n<td>Tick to enable use of CSRF tokens for the Domain Checker form <\/td>\n<\/tr>\n<\/table>\n<\/li>\n<li><a href=\"\/support\/images\/stories\/reseller\/general-settings-whmcs\/savechanges1.png\" rel=\"lightbox-0\"><img decoding=\"async\" class=\"std_ss\" src=\"\/support\/images\/stories\/reseller\/general-settings-whmcs\/savechanges1.png\" alt=\"Blue Save Button\" style=\"float:right; margin:0px 15px 15px 15px;\"><\/a>\n<div style=\"clear:both;\"><\/div>\n<p>Click <strong>Save Changes<\/strong><\/p><\/li>\n<\/ol>\n<p>Now that you have gone through the Security options you are ready to proceed to the <a href=\"\/support\/edu\/whm\/how-to-configure-social-settings-in-whmcs\/\">Social<\/a> tab.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WHMCS provides a variety of security options that range from beginner to advanced. Here is an overview of the primary security features you can access through the general settings. Login to your WHMCS Admin Hover over Setup and choose General Settings Choose the Security tab Fill in the settings: Captcha Form Protection: Choose how captcha<a class=\"moretag\" href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\"> Read More ><\/a><\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4299,4289],"tags":[],"class_list":["post-3852","post","type-post","status-publish","format-standard","hentry","category-security","category-whm"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Configure Security Settings in WHMCS | InMotion Hosting<\/title>\n<meta name=\"description\" content=\"In this article, you will learn how you can configure Security settings in WHMCS to maximize reseller security in your hosting account.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Configure Security Settings in WHMCS | InMotion Hosting\" \/>\n<meta property=\"og:description\" content=\"In this article, you will learn how you can configure Security settings in WHMCS to maximize reseller security in your hosting account.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\" \/>\n<meta property=\"og:site_name\" content=\"InMotion Hosting Support Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/inmotionhosting\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-05-02T14:24:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-08T15:52:44+00:00\" \/>\n<meta name=\"author\" content=\"Christopher Maiorana\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:site\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Maiorana\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\"},\"author\":{\"name\":\"Christopher Maiorana\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/c6922c56c84e17079fd558e07b7ef72f\"},\"headline\":\"How to Configure Security Settings in WHMCS\",\"datePublished\":\"2016-05-02T14:24:09+00:00\",\"dateModified\":\"2023-06-08T15:52:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\"},\"wordCount\":419,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"articleSection\":[\"Security\",\"WebHost Manager (WHM)\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\",\"name\":\"How to Configure Security Settings in WHMCS | InMotion Hosting\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\"},\"datePublished\":\"2016-05-02T14:24:09+00:00\",\"dateModified\":\"2023-06-08T15:52:44+00:00\",\"description\":\"In this article, you will learn how you can configure Security settings in WHMCS to maximize reseller security in your hosting account.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.inmotionhosting.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Configure Security Settings in WHMCS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"name\":\"InMotion Hosting Support Center\",\"description\":\"Web Hosting Support &amp; Tutorials\",\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\",\"name\":\"InMotion Hosting\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"width\":696,\"height\":696,\"caption\":\"InMotion Hosting\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/inmotionhosting\/\",\"https:\/\/x.com\/InMotionHosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/c6922c56c84e17079fd558e07b7ef72f\",\"name\":\"Christopher Maiorana\",\"description\":\"Christopher Maiorana joined the InMotion community team in 2015 and regularly dispenses tips and tricks in the Support Center, Community Q&A, and the InMotion Hosting Blog.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/chris-m-4623144b\/\"],\"url\":\"https:\/\/www.inmotionhosting.com\/support\/author\/christopherm\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Configure Security Settings in WHMCS | InMotion Hosting","description":"In this article, you will learn how you can configure Security settings in WHMCS to maximize reseller security in your hosting account.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/","og_locale":"en_US","og_type":"article","og_title":"How to Configure Security Settings in WHMCS | InMotion Hosting","og_description":"In this article, you will learn how you can configure Security settings in WHMCS to maximize reseller security in your hosting account.","og_url":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/","og_site_name":"InMotion Hosting Support Center","article_publisher":"https:\/\/www.facebook.com\/inmotionhosting\/","article_published_time":"2016-05-02T14:24:09+00:00","article_modified_time":"2023-06-08T15:52:44+00:00","author":"Christopher Maiorana","twitter_card":"summary_large_image","twitter_creator":"@InMotionHosting","twitter_site":"@InMotionHosting","twitter_misc":{"Written by":"Christopher Maiorana","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#article","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/"},"author":{"name":"Christopher Maiorana","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/c6922c56c84e17079fd558e07b7ef72f"},"headline":"How to Configure Security Settings in WHMCS","datePublished":"2016-05-02T14:24:09+00:00","dateModified":"2023-06-08T15:52:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/"},"wordCount":419,"commentCount":0,"publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"articleSection":["Security","WebHost Manager (WHM)"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/","url":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/","name":"How to Configure Security Settings in WHMCS | InMotion Hosting","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#website"},"datePublished":"2016-05-02T14:24:09+00:00","dateModified":"2023-06-08T15:52:44+00:00","description":"In this article, you will learn how you can configure Security settings in WHMCS to maximize reseller security in your hosting account.","breadcrumb":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/whm\/how-to-configure-security-settings-in-whmcs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inmotionhosting.com\/support\/"},{"@type":"ListItem","position":2,"name":"How to Configure Security Settings in WHMCS"}]},{"@type":"WebSite","@id":"https:\/\/www.inmotionhosting.com\/support\/#website","url":"https:\/\/www.inmotionhosting.com\/support\/","name":"InMotion Hosting Support Center","description":"Web Hosting Support &amp; Tutorials","publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.inmotionhosting.com\/support\/#organization","name":"InMotion Hosting","url":"https:\/\/www.inmotionhosting.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","width":696,"height":696,"caption":"InMotion Hosting"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/inmotionhosting\/","https:\/\/x.com\/InMotionHosting"]},{"@type":"Person","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/c6922c56c84e17079fd558e07b7ef72f","name":"Christopher Maiorana","description":"Christopher Maiorana joined the InMotion community team in 2015 and regularly dispenses tips and tricks in the Support Center, Community Q&A, and the InMotion Hosting Blog.","sameAs":["https:\/\/www.linkedin.com\/in\/chris-m-4623144b\/"],"url":"https:\/\/www.inmotionhosting.com\/support\/author\/christopherm\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"primary_category":null,"_links":{"self":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/3852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/comments?post=3852"}],"version-history":[{"count":3,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/3852\/revisions"}],"predecessor-version":[{"id":104935,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/3852\/revisions\/104935"}],"wp:attachment":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/media?parent=3852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/categories?post=3852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/tags?post=3852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}