Protect your logins
- Use a password manager and a different strong password for the panel, each mailbox, SFTP and WordPress.
- Turn on two-factor authentication for the panel.
- Give web designers and others their own extra SFTP login, and delete it when the work is done.
- We never ask for your password by e-mail or phone.
Keep software updated
Most hacked websites ran outdated software. Update WordPress, plugins and themes often – the WordPress page shows what is waiting – and use a PHP version that still gets security updates.
Malware scanning
We scan all files in your account for known malware every week. If something is found, the subscription page shows a red warning with the infected files, and we are notified too.
Bots that try to guess passwords or scan for weak spots are blocked automatically for a while.
If your website has been hacked
Signs: strange redirects, spam pages in Google, new admin users, or a malware warning in the panel.
- Change passwords: the panel, SFTP logins, database users and all WordPress administrators.
- Find out when it started, for example from the malware warning or the date of changed files in the file manager.
- Restore from a backup from before that date. See Backups and restore. Restore files and the database together.
- Update everything right after restoring, and delete plugins and themes you do not use. Otherwise the same hole is used again.
- If there is no clean backup, or you are unsure, contact us. We can help find and remove the malware.
Phishing
Be careful with e-mails that ask you to sign in to "confirm" a mailbox or pay an invoice. Check the address in the browser before you type a password – our panel is at https://my.ge4.dk.