{"id":3944,"date":"2016-06-15T20:54:19","date_gmt":"2016-06-15T20:54:19","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/2016\/06\/15\/basic-security\/"},"modified":"2023-08-21T08:47:38","modified_gmt":"2023-08-21T12:47:38","slug":"basic-security","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/security\/basic-security\/","title":{"rendered":"Basic Security for your Dedicated server"},"content":{"rendered":"

Many different functions and options affect the security of your Dedicated server through WHM. Hackers and other criminals will always seek sensitive data or attempt to infect malware or ransomware on servers for their criminal purposes. <\/p>\n\n\n\n

Basic server security helps to prevent this through firewall security, and limiting access to services and server features like DNS, FTP, web server, database server, email server, and ports. Terminal access using should also be limited so that only required personnel are permitted certain access levels.<\/p>\n\n\n\n

It is also important that servers are kept up to date so with the latest patches or updates. Updates should be periodically checked and scheduled and backups should also be regular and properly saved offsite.<\/p>\n\n\n\n

Other recommended security measures include periodic changes in passwords, required password strengths, 2-factor verification, removal of unused applications, and the review of personnel lists with access to the server. <\/p>\n\n\n\n

If a server must be exposed to public access, then the event should be well planned with access kept to a minimum. Security measures used on the server should not be made public.<\/p>\n\n\n\n

The following list is a set of the basic security options provided within WHM.<\/p>\n\n\n\n

Password Strength<\/h2>\n\n\n\n

\"Add<\/a>

Password strength is a security option that allows you to set the default required password strength for passwords that are used to access different parts of your dedicated server. For information on how to use this option, please see How to Set the Password Strength in WHM<\/a>. If you are curious about the effectiveness of using a secure password, please see Password Strength and Security<\/a>.<\/p>\n\n\n\n

Two Factor Authentication<\/h2>\n\n\n\n

\"Add<\/a>

Two-factor authentication allows you to set up a secure login to your dedicated server using a smartphone and authentication application. Two-factor authentication works by providing a password from the user and then a code generated by an authentication app on the smartphone. For example, once you enable two-factor authentication, you would then configure it to connect to the app on your phone. <\/p>\n\n\n\n

WHM will provide a QR code that must be scanned by the application on the phone, which then generates a code that you must put into WHM. Once the code has been correctly added, the phone will be \u201csynchronized\u201d to the server. <\/p>\n\n\n\n

The application generates a random code every thirty seconds. Login would require that you use your password and code provided by the authentication app on the smartphone. If you fail to add the code on the screen of your phone within thirty seconds, you would receive a new code and have to use the newly generated code. The code is 6 digits and easy to type in within that period of time. <\/p>\n\n\n\n

For more information about using two-factor authentication, please see cPanel Two-Factor Authentication<\/a>.<\/p>\n\n\n\n

Two-factor authentication applications include:<\/p>\n\n\n\n