Locked up on Security – Making Sure Everything is Secure?

Data and information security is now something that no-one can be blasé about. Not us as a web host, nor you as a customer. This is why we have a strict focus on security. We have to do everything we can to protect your data and information, and our systems. Security now requires a multi-pronged approach from all stakeholders in the web hosting industry. In this article I am going to talk about some of the areas that we focus on, here at Hipposerve.

Getting Back to Basics – Securing Your Password?

One of our foremost policies here at Hipposerve is to use good password etiquette. By the very nature of the work we do, our work is consumed by passwords, we need a range to access the servers, one to access our billing system, one to access our accounts systems, and countless more for emails, support systems and the like. If our staff were to use the same password for each of them, and the odd rogue website we could have an utter disaster on our hands.

2FA – Two Factor Authentication

This is why we insist on randomised passwords for all applications used within out systems, and we provide our staff with a password vault so they can store these securely – without writing them down and sticking them on their desk. We also make sure that where software allows, 2FA is employed; providing a second layer of defence. It’s a pain, BUT it means that your data as a customer is safe, and so are our systems

We believe that encouragement is the key, and we offer 2FA to all our customers if they wish to secure their own customer area and control panel – the most vulnerable parts to any web site. And please don’t use a common password and only ever give your website passwords to someone you would be happy to share a toothbrush with.

Our support team have seen (on a far to regular basis) the stress and anguish caused, when a site in hacked because someone has used a password such as “password123”, or used the same password on every site they go to.

At Hipposerve we can’t see the password you enter; it’s just encoded text and meaningless. Some sites are not so scrupulous, and will harvest passwords only to try and use them again later!

The other thing is – please don’t blame us. In 99% of the cases, it is poor housekeeping on the customers part that causes an account to be compromised.

Where to Check First

Here are 7 steps you can take to protect yourself and your data. (This assumes that you are using WordPress)

• Enable Two-Factor Authentication on your Hipposerve account
• Enable Two-Factor Authentication on your cPanel and/or Web Host Manager
• Check all WordPress installations and make 100% sure you’re not using the username ‘admin’ on any of them.
• Install WordFence Security plugin on all WordPress installations
• Make sure all WordPress core files, themes, and plugins are ALWAYS running the latest version
• Use a password manager or password vault and ensure you’re always using STRONG passwords on all logins – Bitwarden is a FREE cross platform password vault and does an excellent job!.
• Regularly scan your computer for malware/viruses

If you aren’t doing these seven simple things, you’re leaving your website at risk to be exploited.

99% of the time an account is compromised through the following (in this order):

• WordPress admin login
• IMAP/Email account login
• FTP account login
• cPanel account login

What other options are there?

If you are looking for a more robust solution to your security issues  we have partnered with SiteLock who offer fully featured site security and malware detection software. This is available as one of our optional extra’s. SiteLock’s Daily Malware Scanning identifies vulnerabilities and known malicious code and automatically removes it from your website to protect your website and visitors against threats.

There are plans to suit all types of website and budget with prices starting from £19.99 a year. There is even an emergency ‘find and remove’ tool, if you get hacked before the software is installed, which has a one time fee of £155.

For full details of this optional extra click here.

What else does Hipposerve do?

I have mentioned what we do on a day to day bases to ensure all your data and information is safe. We also adhere strictly to the recent GDPR laws and have various tools in place in your Customer Portal, where you can manage your personal data. But what do we do technically.

We have very strict network policies in place on our firewall and our own malware detection systems. We use managed servers that are checked nightly for malware and viruses, and we also take nightly backups. You may also find from time to time you IP gets blocked and you can’t log in – this is because our systems have detected that someone has tried to log on too many times. Yes it’s a nuisance, but it all helps secure you!

About Us

Hipposerve is a UK based company offering Web hosting, domain names, specialist email services and a range of other features to help you make your online statement. We offer outstanding customer support that always works on a personal level. You will always be treated as an individual – not just another customer. We also have a range of tools to help get you started:

Hipposerve Domain Tools

1. Domain Price List – updated daily
2. Domain Promotions – updated daily
3. Domain Suggestion Tool – (this is currently only compatible with a few tlds, but can be used to find good names for the others)
4. Domain Registration – (this allows you to filter down the tld’s into different categories to make it easier to find them)

Ordering a hosting package is a fully automated process which can be completed from our website. If however you wish to discuss package options with us, or any other hosting related query;  just drop us a line at our support desk.

You can also phone us on 0330 043 1502.

Don’t forget to visit us on our Facebook Page and our Twitter Feed for latest price information.