Security

cPanel security guides including IP blocking, SSL, firewalls, and access control

How to Block IP Addresses in cPanel Using IP Deny Manager: A Complete Security Guide

by

If your website has ever been hit by a brute force attack, comment spam from a specific IP range, or repeated login attempts from a suspicious location, you already know how disruptive malicious traffic can be. cPanel provides a powerful but often overlooked tool called the IP Deny Manager that lets you block unwanted visitors at the server level before they ever reach your site. Unlike blocking IPs through .htaccess alone, the IP Deny Manager operates through Apache’s httpd.conf, offering more reliable enforcement and broader coverage across all services on your account.

In this guide, you will learn how to use the cPanel IP Deny Manager to block specific IP addresses, entire IP ranges, and CIDR blocks. You will also learn when to use IP blocking versus other security tools like cPHulk Brute Force Protection or ConfigServer Security & Firewall (CSF), so you can build an effective layered defense for your website.

Read more

How to Enable and Configure Hotlink Protection in cPanel: A Complete Guide

by

If you run a website with images, videos, or downloadable files, you’ve probably noticed bandwidth creeping up even when your actual traffic seems steady. One common culprit: other sites linking directly to your media files. This practice, known as hotlinking, drains your server resources and can slow down your site for legitimate visitors. Fortunately, cPanel’s Hotlink Protection feature makes it easy to stop this cold.

In this guide, you’ll learn exactly what hotlinking is, how to enable Hotlink Protection in cPanel, how to configure allowed domains and file extensions, and what to do if legitimate sites get blocked. By the end, you’ll have a simple but effective line of defense running that saves bandwidth and keeps your content behind your intended audience.

Read more

How to Fix AutoSSL Errors in cPanel: A Complete Troubleshooting Guide

by

Understanding AutoSSL and Its Role in cPanel Security

AutoSSL is one of cPanel’s most valuable security features — it automatically issues, installs, and renews free SSL/TLS certificates for every domain on your server through Let’s Encrypt or a cPanel-authorized certificate authority. For site owners managing multiple domains, AutoSSL removes the tedious manual work of tracking expiration dates and running renewal commands. When it’s working correctly, you never have to think about it. But when AutoSSL breaks — whether due to validation failures, rate limits, or misconfigured DNS — every site on your server becomes vulnerable to browser security warnings and lost visitor trust.

Unfortunately, AutoSSL failures are surprisingly common, especially on shared hosting environments and newly configured servers. Domain validation (DV) checks fail, rate limits kick in, or the cPanel certificate authority rejects a request for reasons that aren’t immediately obvious. This guide walks through every major AutoSSL error scenario, explains what causes each one, and gives you the exact steps to resolve it so you can restore automatic SSL coverage across your entire cPanel account.

Read more

How to Fix 500 Internal Server Error in cPanel: A Complete Troubleshooting Guide

by

Few error messages cause as much dread for website owners as the dreaded 500 Internal Server Error. In cPanel environments, this generic HTTP status code can crop up unexpectedly, wiping out your homepage with a blank white screen. The frustrating part? It rarely tells you what went wrong.

Despite its vague nature, a 500 Internal Server Error is almost always caused by one of a handful of common issues — and the good news is that most of them are straightforward to diagnose and fix directly from your cPanel dashboard. This guide walks through the most frequent culprits and the exact steps to resolve each one, so you can get your site back online fast.

Read more

How to Use cPanel IP Blocker: A Complete Guide to Blocking Malicious IPs

by

cPanel’s IP Blocker is a built-in security tool that lets you block specific IP addresses, IP ranges, or entire subnets from accessing your website. Whether you’re dealing with brute-force login attempts, spam bots scraping your content, or a malicious visitor targeting your server, the IP Blocker gives you an instant way to cut off unwanted traffic at the firewall level.

In this guide, you’ll learn how to use cPanel’s IP Deny Manager effectively — from blocking single addresses and CIDR ranges to troubleshooting common issues like accidentally locking yourself out. We’ll also cover how IP Blocker compares to Apache .htaccess deny rules and tools like ConfigServer Security & Firewall (CSF), so you can choose the right approach for your setup.

Read more

How to Fix AutoSSL Errors in cPanel: Common Problems and Solutions

by

If you run a cPanel server, you’ve probably encountered AutoSSL errors at some point. AutoSSL is one of cPanel’s most useful features — it automatically provisions and renews free SSL/TLS certificates from Sectigo (formerly Comodo) or Let’s Encrypt, keeping your sites secure without manual intervention. But when it breaks, visitors see browser security warnings, email delivery can fail, and search engines may penalize your sites for not serving content over HTTPS.

The good news is that most AutoSSL errors are straightforward to diagnose and fix. Whether you’re seeing “AutoSSL Check Failed,” “Order Failed,” or a certificate that simply won’t install, this guide walks through every common error scenario and the exact steps to resolve it. We’ll cover server-level checks, DNS validation issues, rate limiting, and preventive configuration so AutoSSL stays healthy going forward.

Read more

How to Password-Protect Directories in cPanel: A Complete Guide to Directory Privacy

by

If you run a WordPress site or manage a cPanel hosting account, there are likely directories on your server that you don’t want the general public to access. Whether it’s a staging environment, an admin dashboard, a members-only section, or sensitive configuration files, cPanel’s built-in Directory Privacy feature (powered by Apache’s .htaccess and .htpasswd files) lets you lock down any folder with username and password credentials. It’s one of the simplest yet most effective security measures you can implement — and you can do it entirely from the cPanel interface without touching a terminal.

Read more

How to Use cPanel’s IP Blocker to Block or Allow IP Addresses

by

If you manage a website with cPanel, keeping unwanted traffic out is just as important as letting legitimate visitors in. Whether you are dealing with a malicious bot scraping your content, a brute-force attack on your login page, or just need to restrict admin access to specific IP addresses, cPanel’s IP Blocker tool gives you direct control over who can and cannot reach your site.

This guide walks through everything you need to know about blocking and allowing IP addresses in cPanel — from the basics of the IP Blocker interface to advanced use cases like blocking entire CIDR ranges and diagnosing false positives.

Read more

How to Troubleshoot and Fix 403 and 500 Errors in cPanel

by

503 and 500-level errors are among the most frustrating issues cPanel users encounter. A 403 Forbidden error blocks access entirely, while a 500 Internal Server Error suggests something broke on the server side. Both can halt your site traffic, damage SEO rankings, and disrupt business operations if not resolved quickly. Understanding how to diagnose and fix these errors is essential for any sysadmin or site owner running a cPanel server.

This guide walks through the most common causes of 403 and 500 errors in cPanel environments and provides clear, actionable steps to resolve each one. Whether you are managing a single WordPress site or a reseller account with multiple domains, these troubleshooting techniques will help you restore access and prevent future issues.

Read more