{"id":10751,"date":"2026-10-09T11:40:02","date_gmt":"2026-10-09T15:40:02","guid":{"rendered":"https:\/\/www.pair.com\/support\/kb\/?post_type=ht_kb&#038;p=10751"},"modified":"2026-10-09T11:43:53","modified_gmt":"2026-10-09T15:43:53","slug":"website-security-best-practices","status":"publish","type":"ht_kb","link":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/","title":{"rendered":"Website Security Recommendations"},"content":{"rendered":"\n<p>Website security requires several layers of protection. The following recommendations can reduce your risk and make recovery easier if an incident occurs.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Keep Software, Plugins, and Themes Updated<\/h2>\n\n\n\n<p>Keep your content management system (CMS), plugins, themes, and other website applications up to date. Older versions may contain known security vulnerabilities.&nbsp;<\/p>\n\n\n\n<p>Install software only from sources you trust. Replace anything that is no longer maintained or supported by its developer.&nbsp;<\/p>\n\n\n\n<p>Before installing a major update, create a backup and confirm your website is compatible with the new version.&nbsp;<\/p>\n\n\n\n<p>See:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/video-software-updates-in-pairsim\/\">Software Updates in PairSIM<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/wordpress-updating-plugins\/\">Updating WordPress Plugins<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/wordpress-updating-themes\/\">Updating WordPress Themes<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Use Strong Passwords and Multifactor Authentication<\/h2>\n\n\n\n<p>Use a unique password for every hosting, website, email, database, and file transfer account. A password manager can create and store strong passwords for you.&nbsp;<\/p>\n\n\n\n<p>Enable multifactor authentication wherever it is available, especially for accounts with administrator access.&nbsp;<\/p>\n\n\n\n<p>Avoid sharing account credentials. Give each person an individual account so their access can be managed separately.&nbsp;<\/p>\n\n\n\n<p>See:&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/pair-2fa\/\" target=\"_blank\" rel=\"noreferrer noopener\">Two-Factor Authentication on Pair Accounts<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/changing-resetting-account-password\/\" target=\"_blank\" rel=\"noreferrer noopener\">Changing or Resetting Your Pair Account Password<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/resetting-the-wordpress-admin-password-in-the-acc\/\">Changing Your WordPress Admin Password in the ACC<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/changing-a-wordpress-database-password-on-shared-and-vps\/\" target=\"_blank\" rel=\"noreferrer noopener\">Changing a WordPress Database Password on Shared and VPS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/change-wordpress-database-password-managed-wordpress\/\">Changing a WordPress Database Password on Managed WordPress and Podcast Websites<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/changing-ftp-login-password\/\" target=\"_blank\" rel=\"noreferrer noopener\">Changing an FTP Login Password<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/how-to-reset-your-wp-staging-site-password\/\" target=\"_blank\" rel=\"noreferrer noopener\">Changing Your WP Staging Site Password<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/change-passwords-mailbox\/\" target=\"_blank\" rel=\"noreferrer noopener\">Changing Your Mailbox Password<\/a><\/li>\n\n\n\n<li><a href=\"http:\/\/pair.com\/support\/kb\/changing-an-acc-database-password\/\" target=\"_blank\" rel=\"noreferrer noopener\">Changing Your ACC Database Password<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Review Users and Permissions<\/h2>\n\n\n\n<p>Regularly review everyone who can access your hosting account, website administration area, databases, and files.&nbsp;<\/p>\n\n\n\n<p>Remove accounts that are no longer needed, including accounts belonging to former employees, contractors, or developers. Temporary accounts should be removed when the work is complete.&nbsp;<\/p>\n\n\n\n<p>Give each user only the permissions required for their work. Administrator access should be limited to people who genuinely need it.&nbsp;<\/p>\n\n\n\n<p>Review SSH keys and file transfer logins as part of this process. Remove keys and logins that are no longer needed.&nbsp;<\/p>\n\n\n\n<p>See:&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/deleting-ssh-keys\/\">Deleting SSH Keys<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/changing-ftp-login-password\/\">Changing an FTP Login Password<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/wordpress-user-roles-and-capabilities\/\">WordPress User Roles and Capabilities<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Remove Unused Software, Files, and Databases<\/h2>\n\n\n\n<p>Delete plugins, themes, applications, test sites, files, and databases that you no longer use. Deactivating software does not remove its files. Those files may remain on your account and contain vulnerabilities, so deleting unused software is the better option.&nbsp;<\/p>\n\n\n\n<p>Pay particular attention to abandoned website installations and old development projects. Confirm that an item is no longer needed before permanently removing it.&nbsp;<\/p>\n\n\n\n<p>See:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/how-to-delete-files-in-the-acc\/\" target=\"_blank\" rel=\"noreferrer noopener\">Deleting Files and Directories in the ACC<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/how-to-delete-a-database-in-the-acc\/\" target=\"_blank\" rel=\"noreferrer noopener\">Deleting a Database in the ACC<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Maintain Reliable Backups<\/h2>\n\n\n\n<p>Create regular backups of your website files and databases. Back up your website more frequently if it changes often.&nbsp;<\/p>\n\n\n\n<p>Keep more than one recent backup, with at least one copy stored separately from your hosting account. This helps protect your backups if the account itself is compromised.&nbsp;<\/p>\n\n\n\n<p>Test the restoration process periodically to confirm that your backups are complete and usable.&nbsp;<\/p>\n\n\n\n<p>Pair offers different backup options based on your hosting package. See:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/how-to-take-manual-file-backups-on-shared-vps-and-qs-dedicated\/\" target=\"_blank\" rel=\"noreferrer noopener\">Taking Manual File Backups on Shared, VPS, and Dedicated<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/wp-hosting-backups-types\/\" target=\"_blank\" rel=\"noreferrer noopener\">WP Hosting Backup Types<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/how-to-take-database-backups-in-the-acc\/\" target=\"_blank\" rel=\"noreferrer noopener\">Taking Database Backups in the ACC<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/snapshots-and-backups-what-is-the-difference\/\" target=\"_blank\" rel=\"noreferrer noopener\">Snapshots and Backups: What is the Difference?&nbsp;<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/cab-backups\/\" target=\"_blank\" rel=\"noreferrer noopener\">Customer Accessible File Backups<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Use Secure Connections<\/h2>\n\n\n\n<p>Use HTTPS to protect information sent between your website and its visitors. Make sure your website has a valid SSL certificate and redirects visitors from HTTP to HTTPS.&nbsp;<\/p>\n\n\n\n<p>Use SFTP or SSH when transferring website files.&nbsp;<\/p>\n\n\n\n<p>See:&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/e-commerce-using-ssl\/\" target=\"_blank\" rel=\"noreferrer noopener\">Using SSL<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/uploading-files-using-ftp\/\" target=\"_blank\" rel=\"noreferrer noopener\">Using FTP with Hosting Accounts<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/connecting-with-ssh\/\" target=\"_blank\" rel=\"noreferrer noopener\">Connect to Your Pair Account with SSH<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Use Pair Malware Security\u2019s Free Detection Tier&nbsp;<\/h2>\n\n\n\n<p>Turn on Pair Malware Security\u2019s free Detection tier to scan your domain and detect malware. Check the results periodically and address any issues that are found.&nbsp;<\/p>\n\n\n\n<p>See:&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/upgrade-pair-malware-security\/\" target=\"_blank\" rel=\"noreferrer noopener\">Adding Pair Malware Security to Your Account&nbsp;<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.pair.com\/support\/kb\/accessing-the-pair-malware-security-dashboard\" target=\"_blank\" rel=\"noreferrer noopener\">Accessing the Pair Malware Security Dashboard<\/a><\/li>\n<\/ul>\n\n\n\n<p>Additional tiers are available if you want more automated protection and security features. Learn more about available protection options here: Pair Malware Security.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Watch for Unusual Activity<\/h2>\n\n\n\n<p>Pay attention to security notifications and unexpected changes to your website. Warning signs may include unfamiliar admin accounts, modified files, unwanted redirects, missing content, and other unwanted changes. See Understanding <a href=\"https:\/\/www.pair.com\/support\/kb\/malware-types-and-scan-results\" target=\"_blank\" rel=\"noreferrer noopener\">Malware Types and Scan Results<\/a> for help interpreting Pair Malware Security scan results.&nbsp;<\/p>\n\n\n\n<p>If you suspect a security incident, act promptly. Change affected passwords, review account access, and contact our support team if you have any questions about your account.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Review Your Security Regularly<\/h2>\n\n\n\n<p>Website security requires ongoing attention. Review these recommendations periodically and whenever you add users, install new software, or make significant changes to your site.&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Website security requires several layers of protection. The following recommendations can reduce your risk and make recovery easier if an incident occurs.&nbsp; Keep Software, Plugins, and Themes Updated Keep your content management system (CMS), plugins, themes, and other website applications up to date. Older versions may contain known security vulnerabilities.&nbsp;&#8230;<\/p>\n","protected":false},"author":11,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":[],"ht-kb-category":[229],"ht-kb-tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Website Security Best Practices Checklist | Pair Networks<\/title>\n<meta name=\"description\" content=\"Follow nine website security best practices to protect accounts, update software, strengthen passwords, maintain backups, and detect malware.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Website Security Best Practices Checklist | Pair Networks\" \/>\n<meta property=\"og:description\" content=\"Follow nine website security best practices to protect accounts, update software, strengthen passwords, maintain backups, and detect malware.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base - Pair Networks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/pairnetworks\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-09T15:43:53+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@pairNetworks\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/\",\"name\":\"Website Security Best Practices Checklist | Pair Networks\",\"isPartOf\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#website\"},\"datePublished\":\"2026-10-09T15:40:02+00:00\",\"dateModified\":\"2026-10-09T15:43:53+00:00\",\"description\":\"Follow nine website security best practices to protect accounts, update software, strengthen passwords, maintain backups, and detect malware.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.pair.com\/support\/kb\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Website Security Recommendations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#website\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/\",\"name\":\"Knowledge Base - Pair Networks\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.pair.com\/support\/kb\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#organization\",\"name\":\"Pair Networks\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg\",\"contentUrl\":\"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg\",\"width\":360,\"height\":360,\"caption\":\"Pair Networks\"},\"image\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/pairnetworks\/\",\"https:\/\/twitter.com\/pairNetworks\",\"https:\/\/www.instagram.com\/pairnetworks\/\",\"https:\/\/www.linkedin.com\/company\/2269676\/\",\"https:\/\/www.pinterest.com\/pairnetworksinc\/pins\/\",\"https:\/\/www.youtube.com\/user\/pairnetworks\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Website Security Best Practices Checklist | Pair Networks","description":"Follow nine website security best practices to protect accounts, update software, strengthen passwords, maintain backups, and detect malware.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/","og_locale":"en_US","og_type":"article","og_title":"Website Security Best Practices Checklist | Pair Networks","og_description":"Follow nine website security best practices to protect accounts, update software, strengthen passwords, maintain backups, and detect malware.","og_url":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/","og_site_name":"Knowledge Base - Pair Networks","article_publisher":"https:\/\/www.facebook.com\/pairnetworks\/","article_modified_time":"2026-10-09T15:43:53+00:00","twitter_card":"summary_large_image","twitter_site":"@pairNetworks","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/","url":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/","name":"Website Security Best Practices Checklist | Pair Networks","isPartOf":{"@id":"https:\/\/www.pair.com\/support\/kb\/#website"},"datePublished":"2026-10-09T15:40:02+00:00","dateModified":"2026-10-09T15:43:53+00:00","description":"Follow nine website security best practices to protect accounts, update software, strengthen passwords, maintain backups, and detect malware.","breadcrumb":{"@id":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.pair.com\/support\/kb\/website-security-best-practices\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pair.com\/support\/kb\/"},{"@type":"ListItem","position":2,"name":"Website Security Recommendations"}]},{"@type":"WebSite","@id":"https:\/\/www.pair.com\/support\/kb\/#website","url":"https:\/\/www.pair.com\/support\/kb\/","name":"Knowledge Base - Pair Networks","description":"","publisher":{"@id":"https:\/\/www.pair.com\/support\/kb\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pair.com\/support\/kb\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pair.com\/support\/kb\/#organization","name":"Pair Networks","url":"https:\/\/www.pair.com\/support\/kb\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/","url":"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg","contentUrl":"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg","width":360,"height":360,"caption":"Pair Networks"},"image":{"@id":"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/pairnetworks\/","https:\/\/twitter.com\/pairNetworks","https:\/\/www.instagram.com\/pairnetworks\/","https:\/\/www.linkedin.com\/company\/2269676\/","https:\/\/www.pinterest.com\/pairnetworksinc\/pins\/","https:\/\/www.youtube.com\/user\/pairnetworks"]}]}},"_links":{"self":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb\/10751"}],"collection":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/comments?post=10751"}],"version-history":[{"count":6,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb\/10751\/revisions"}],"predecessor-version":[{"id":10766,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb\/10751\/revisions\/10766"}],"wp:attachment":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/media?parent=10751"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=10751"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=10751"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}