Keeping Your Website Secure

During the time it has taken me to write this article there have been 13 separate attempts to log into this website. Fortunately i have some and free software installed that has blocked the IP address of these attempts.

Website security is a big issue and something that should be taken seriously. If your business depends on its website then it is something that you should take seriously too. You wouldn’t leave your business premises unlocked. But by having weak passwords, or not following basic rules, you are essentially leaving your website unlocked for the world to access, and wreak havoc.

If you are hacked and your site even just changed maliciously, you could go out of business as your brand goes down the tube. Worse still, what if there is a customer data breach?

Doesn’t the Web Host handle Security?

Well, yes we do, we can put all the most security systems in places, but if you have your password set to “PASSWORD”, or “LETMEIN” it isn’t going to do any good.

You can find out the security measures we put in place here.

What Can I Do?

Choose a Good Hosting Provider

Choosing a hosting provider that takes security seriously is a good start. It means that you have a good basis on which to work. It’s also means there is someone there to offer you advice when you are looking at securing up your site.

If you are choosing a designer, it is worth asking them what features they put in place to secure your website, especially if you are developing an e-commerce business where online payments are going to be taken.

Install Security Software on Your Site

Like I said before, as a host we can only do so much to protect your site. Imagine you bought a nice shiny new car with all the latest anti theft features and alarms. Then imagine you leave the door unlocked and the keys on the driver’s seat. There is not a lot the manufacturer can do about that!

But there is plenty you can do.

• Wordfence – If you are hosting a wordpress site you can install firewall software such as Wordfence. For basic protection this is free, and if you want some of the additional features you can upgrade to the Pro version.
• SiteLock Malware Scanner – For non wordpress sites (and wordpress too for additional protection), we offer SiteLock Malware Scanner which has a variety of product tiers to suit your needs.

Make sure You are Using an SSL Certificate

Information in a website flows two ways, and during  that exchange you may be sending email addresses, personal details, financial details and more. It is very important, both for google rankings and for the security of your customers that you install an SSL certificate on your website, that encrypts this data.

Fortunately with Hipposerve you can benefit from a FREE Auto SSL certificate that is suitable for basic applications. If however you are looking for more robust and flexible options then we also offer the full range of SSL certificates to suit your business requirements.

Back Up Your Website Regularly

Many people falsely assume that their websites are backed up by their hosts indefinitely. Space costs money and there is no way anyone could do this. We are able to keep one nightly backup, however this is overwritten each evening. Sometimes you may not notice your website has been hacked for a few days, so it is important to have good website backup discipline in place.

Fortunately we offer two types of backup:

• 24/7 Managed WordPress – which includes backup among other features
• CodeGuard Backup – which is a standalone option, which works on both WordPress and Non-Wordpress sites.

Both types of backup are stored in encrypted form, off-site on Amazon’s S3 Servers.

Keep Website Files Up to Date

It is really important to keep an eye on code updates for your website and any plugins that it may use. Now these change regularly and it can be a real nuisance having to check on these on a daily basis. Fortunately if you have WordPress we offer our 24/7 Managed WordPress Add On that will track your wordpress installation and update it in real time. It also includes a backup and a number of other useful features.

Finally – Have a Strong Password – Please!

I know it’s a pain, and I don’t wish to sound like I am nagging, but this is the most common way a hacker gets into your site. Ideally the password should be just an random mix of letters, numbers and symbols, with no meaning whatsoever.
Now I was having trouble with all these as I have many hundreds of different passwords and I really do need to keep all my stuff secure, many of my customers depend on it.

I use password vault software to keep track of these, which means I do not even need to know my passwords.

Try Bitwarden as a good option – its basic installation is free.

About Us

Hipposerve has over 20 years of experience offering web hosting, VPS Hosting, domain names and pro email services to help you make your online statement. We offer outstanding customer support where you will always be treated as an individual - not just another customer. We also have a range of tools to help get you started.

Ordering

Ordering a hosting package is a fully automated process which can be completed from our website. If however you wish to discuss package options with us, or any other hosting related query;  just drop us a line at our support desk.

You can also phone us on 0330 043 1502.

Don't forget to visit us on our Facebook Page and our Twitter Feed for our latest updates.