Password Security Best Practices
Strong passwords are one of the most important steps you can take to protect your hosting account, email, and website. Follow these guidelines to create and manage secure passwords.
What Makes a Strong Password?
- At least 16 characters long - the longer the better
- A mix of uppercase and lowercase letters
- Numbers and special characters (e.g. !, @, #, $)
- Not based on personal information (name, birthday, company name)
- Not a word found in a dictionary
- Unique - never reuse a password across multiple accounts
Good vs Bad Password Examples
| Weak Password | Strong Password |
|---|---|
| password123 | Tr7!kP@9mLxQ2&vN |
| mybusiness2024 | w#R4eK!9pZ@2mJsL |
| john1234 | Qx8!Lm&3TpN@rW9k |
Use a Password Manager
We strongly recommend using a password manager to generate and store complex passwords securely. Popular options include:
- Bitwarden - Free and open source
- 1Password
- LastPass
Where to Change Your Passwords
- Client Area password: Log in > Click your name > Profile > Change Password
- cPanel password: Log in to cPanel > Password and Security
- Email account password: Log in to cPanel > Email Accounts > Manage > Update Password
Enable Two-Factor Authentication
For additional security, enable 2FA on your client area account. See our guide: How to Enable Two-Factor Authentication.