Securing your ServerNet account

By following a few simple but critical tips, you can ensure your user account security against hacking and unauthorized access. From strong passwords to a valid recovery email.

6 min Updated 24 Jul 2026

Why is user account security in hosting and cloud servers critical?

Your user account in the hosting or cloud server management panel is the gateway to all your data and services. If this gateway is not secure enough, an attacker can easily access your files, databases, emails, and even domains. Unfortunately, many users think that user account security only ends with choosing a simple password, while this is only a small part of a security chain.

In this article, we will show you practically and step-by-step how to maximize the security of your user account in cloud and hosting services (such as ServerNet). All the tips provided are based on the latest security standards and real-world experiences.

1. Choosing and managing a strong password

A password is your first line of defense. But what are the characteristics of a strong password?

Characteristics of a secure password

  • Appropriate length: At least 12 characters, preferably 16 to 20 characters. The longer, the more secure.
  • Character combination: Include uppercase letters (A-Z), lowercase letters (a-z), numbers (0-9), and special symbols (!@#$%^&*).
  • Avoid personal information: Never use names, birth dates, phone numbers, or common words.
  • No repetition: Use a unique password for each service.

Method for creating a strong password and remembering it

Instead of using random words, use the passphrase method. Choose a long and unusual sentence and combine the first letter of each word with symbols and numbers. Example:

Base sentence: I built my first website in 1398!
Password: M@dS1398@vlinWbs@yt@mS@khtm!

This password is both strong and, with a little practice, easy to remember.

Managing passwords with a Password Manager

The best way to manage multiple passwords is to use a password manager (such as Bitwarden, 1Password, or KeePass). These tools store your passwords encrypted and are only accessible with a master password.

Common mistake: Saving passwords in the browser (Chrome, Firefox) without a master password. If someone gains physical access to your system, they can see all your passwords.

2. Enabling Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA) is an additional security layer that protects your account even if your password is compromised. In cloud services like ServerNet, enabling 2FA is highly recommended.

Common 2FA methods

  • Authenticator Apps: Such as Google Authenticator, Microsoft Authenticator, or Authy. These apps generate a 6-digit code every 30 seconds.
  • SMS: A code is sent to your mobile number. It has lower security than apps (due to SIM swapping attacks).
  • Hardware Keys: Such as YubiKey. The most secure method, but requires purchasing hardware.

How to enable 2FA in the management panel

The typical steps are as follows:

  1. Go to the Security Settings section of your user account.
  2. Find the "Two-Factor Authentication" option.
  3. Install the authenticator app on your phone.
  4. Scan the displayed QR code with the app.
  5. Enter the generated 6-digit code to complete activation.
Common mistake: Not saving recovery codes after enabling 2FA. If you lose your phone and don't have the recovery codes, you will permanently lose access to your account. Be sure to store these codes in a safe place (e.g., print them and put them in a safe).

3. The importance of a valid and up-to-date recovery email

The recovery email is the key to returning to your account if you forget your password or lose access. If this email is not valid, you may be permanently locked out of your account.

Key tips for the recovery email

  • Use a separate email: The recovery email should not be the same email you use to log into the service. It is better to choose an email from a different service (e.g., Gmail for a ServerNet account).
  • Also secure the recovery email: Enable 2FA on the recovery email as well.
  • Periodic updates: Every 6 months, check that the recovery email is still valid and you have access to it.
  • Do not use temporary emails: Disposable emails (Temp Mail) are not suitable for account recovery.
Common mistake: Using a corporate email that you may lose access to after changing jobs. Always use a personal and permanent email.

4. Updating software and plugins

User account security is not limited to passwords and 2FA. Software installed on your server or hosting can also be an entry point.

What should you keep updated?

  • Server operating system: If you use a cloud server, install security updates for the operating system (Linux/Windows) on time.
  • CMS and plugins: Always update WordPress, Joomla, Drupal, and all plugins and themes to the latest version.
  • Libraries and frameworks: If you have custom applications on the server, keep the used libraries updated.

How to enable automatic updates

In many services, you can enable automatic updates. In Linux, use the following command for automatic package updates:

sudo apt update && sudo apt upgrade -y
# To enable automatic security updates:
sudo apt install unattended-upgrades
sudo dpkg-reconfigure --priority=low unattended-upgrades

In WordPress, you can also enable automatic updates by adding the following line to the wp-config.php file:

define('WP_AUTO_UPDATE_CORE', true);

5. Limiting access and using SSH Key

If you use a cloud server, use an SSH key instead of a password for login. This method is much more secure and renders brute-force attacks ineffective.

How to create and use an SSH Key

  1. On your system (Linux/Mac), run the following command:
ssh-keygen -t ed25519 -C "your_email@example.com"

This command creates a pair of public and private keys in the ~/.ssh/ folder.

  1. Add the public key to your server:
ssh-copy-id user@your-server-ip
  1. After ensuring the key works, disable password login. Edit the /etc/ssh/sshd_config file and change the following line:
PasswordAuthentication no

Then restart the SSH service:

sudo systemctl restart sshd
Common mistake: Storing the private key in insecure locations (e.g., in email or public cloud storage). Never share the private key with anyone and protect it with a password on your system.

6. Regular backup and recovery

Even with the best security measures, something can happen. Regular backup of data and account settings is your last resort.

What should you back up?

  • Website files: The entire public_html or www folder
  • Database: SQL export from MySQL/MariaDB
  • Server settings: Configuration files (Apache/Nginx, PHP, SSH)
  • Emails: If you use an email server

How to automate backups with a script

A simple bash script for daily backup of database and files:

#!/bin/bash
BACKUP_DIR="/backup/$(date +%Y-%m-%d)"
mkdir -p $BACKUP_DIR
# Database backup
mysqldump -u username -p'password' database_name > $BACKUP_DIR/db.sql
# File backup
tar -czf $BACKUP_DIR/files.tar.gz /var/www/html
# Remove old backups (older than 7 days)
find /backup/* -mtime +7 -exec rm -rf {} \;

Run this script with a daily cronjob.

Conclusion

User account security is not a one-time process but a continuous habit. By following the simple tips mentioned in this article – from choosing a strong password and enabling 2FA to regular updates and backups – you can minimize the risk of cyber attacks. Remember that the technical support of any reputable service provider (including ServerNet) will never ask you for your password or sensitive information. If someone contacts you under this pretext, they are definitely a scammer.

Perform a security review of your account today and ensure all security layers are properly configured. Your security is in your own hands.

user account securitystrong passwordrecovery emailtwo-factor authenticationhosting securityServerNet
Was this page helpful?