How to Secure Your Hosting Account

Protecting Your Lurstan Host Account & Services

At Lurstan Host, the security of your data and services is our top priority. While we implement strict security measures on our server infrastructure, maintaining the security of your individual account is a shared responsibility.

Follow these essential steps to ensure your Client Area, VPS, and RDP services remain secure against unauthorized access.

1. Use a Strong, Unique Password

Your password is the first line of defense. Avoid using simple passwords like password123 or using the same password you use on other websites.

• Recommendation: Use a password manager (like Bitwarden or LastPass) to generate a random string of at least 12 characters, including uppercase letters, numbers, and symbols.

• How to update: Log in to the Client Area, click on your profile icon, and select Change Password.

2. Enable Two-Factor Authentication (2FA)

Two-Factor Authentication adds an extra layer of security. Even if someone guesses your password, they cannot access your account without the unique code generated by your phone.

• How to enable:

  1. Log in to your Lurstan Host Client Area.

  2. Go to Security Settings.

  3. Click to enable Two-Factor Authentication.

  4. Scan the QR code using an app like Google Authenticator or Authy.

3. Keep Your Software Updated

If you are running a VPS or using cPanel, outdated software is the most common entry point for attackers.

• For VPS/RDP Users: Regularly run system updates (e.g., apt-get update for Ubuntu/Debian or Windows Updates for RDP) to patch security vulnerabilities.

• For Web Hosting: Ensure your CMS (WordPress, Joomla, etc.) and all plugins/themes are updated to the latest versions.

4. Be Wary of Phishing Emails

Attackers may send emails pretending to be Lurstan Host to steal your login credentials.

• Verify the Sender: Official emails from us will always come from a @lurstanhost.com address.

• Check Links: Hover over links before clicking them to ensure they lead to our actual website.

• Never Share Passwords: Our support team will never ask for your password via email.

5. Secure Your Access Protocols (VPS Users)

If you manage a VPS, leaving default ports open can invite brute-force attacks.

• Change SSH Port: Change your default SSH port from 22 to a custom number.

• Disable Root Login: Create a new user with sudo privileges and disable direct root login.

• Use SSH Keys: Whenever possible, use SSH keys instead of passwords for authentication.