Imunify360 website security Imunify360 provides layered server and website protection, including malware and attack... Set up multi-factor authentication for Microsoft 365 Multi-factor authentication substantially reduces the risk from stolen passwords.Applies to:... Set up SPF, DKIM and DMARC records These records help receiving systems authenticate mail and apply domain policy.Applies to: Email... DNSSEC availability and changes DNSSEC is not currently available on Tudor Internet’s standard InterWorx nameservers.Important:... Reset a forgotten Customer Portal password Use the password-reset process instead of repeatedly trying an old password.Applies to: Customer... Reset a Microsoft 365 user password An authorised administrator can reset a forgotten or compromised password.Applies to: Microsoft... Secure a new WordPress website Harden WordPress without relying on one plugin or hiding the login page as the only security... Security Defaults and Conditional Access Microsoft provides tenant controls to require strong authentication and restrict risky... What to do after a malware alert Act promptly to contain the issue and prevent reinfection.Applies to: Website security, malware... Why a hosting trial is awaiting manual approval Manual review protects the shared platform from spam, phishing, malware and repeated free-trial... Enable two-factor authentication Two-factor authentication adds a second check to account access.Applies to: Customer Portal... Recover a WordPress administrator password Use the least disruptive recovery method and confirm that the mailbox and administrator account... Report suspected Microsoft 365 phishing or compromise Act immediately when a user approves an unexpected prompt, discloses credentials or sees... Respond to a suspected VPS compromise Contain a suspected compromise while preserving evidence and protecting other systems.Applies to:... Roll out DMARC safely from monitoring to enforcement Start DMARC with reporting, identify every legitimate sender and tighten policy only after SPF... Secure first access to a dedicated server Treat initial credentials as temporary and establish named, auditable administration.Applies to:... Secure hosting and application passwords Every administrator, mailbox and file-transfer account should use a unique strong... Keep Website Backup credentials current Backup jobs fail silently or age out when FTP, SFTP, database or application credentials change... Keep websites and extensions updated Unsupported applications and plugins are a common cause of compromise.Applies to: Website... Plan a mailbox migration to Microsoft 365 Choose a migration method based on the source platform, mailbox volume, identity design and... Prepare welcome details for a reseller hosting customer Give the customer enough information to manage their SiteWorx account without disclosing reseller... Set safe file and directory permissions Use the least permission required by the web server and application; avoid world-writable... Use CAA records without blocking certificate renewal CAA records can limit certificate issuance, but an incomplete policy may prevent Tudor Internet... Why Tudor Internet may request account or order verification Verification helps prevent fraudulent orders, unauthorised domain changes and takeover of... Microsoft 365 retention and backups Microsoft service retention and recycle features do not replace a business recovery and... Protect forms and public sites from abuse Forms, login pages and public files can be targeted by bots and automated abuse.Applies to:... Respond to a compromised reseller customer account Contain one customer without exposing other accounts, rotate credentials and remove the... SiteLock Lite included with Tudor Internet hosting Shared, Charity, Non-Profit and Agency Reseller hosting include SiteLock Website Security Lite;... SSH and SFTP availability on shared hosting Customer SSH shell access and SFTP are not provided with Tudor Internet shared, charity,... Fix website file ownership and permission problems Correct ownership and permissions rather than making files world-writable.Applies to: SiteWorx... Microsoft 365 support responsibilities Tudor Internet supports licences and the reseller relationship, while administration scope... Report a compromised hosting account Open an urgent support ticket when a site is defaced, redirecting, sending spam or exposing... Report abuse or security concerns Report spam, phishing, malware, unlawful content or attacks with enough evidence to identify the... Reset an OX mailbox password Reset a mailbox password through the available service controls or an authorised support... Secure your Tudor Internet account Layered security reduces unauthorised orders, domain changes and access to support... Use remote MariaDB access safely Remote database access must be explicitly permitted for a known source IP and should not be... Cancel or reduce Microsoft 365 licences Review commitment terms, data retention and replacement services before reducing... Review Imunify360 malware quarantine and false positives Understand why a file was detected before restoring it, and never restore a file merely because... Find and protect a domain transfer authorisation code Many generic domains require an EPP or Auth-Code to approve a registrar transfer; treat it like a... Read website access and error logs Use timestamps, status codes and request paths to identify the failed layer before changing DNS,... Recognise a fake Tudor Internet login or payment message Use these checks before following a link or entering Customer Portal, payment or domain... Understand wildcard SSL certificate coverage A wildcard such as *.example.com covers one label level and does not automatically cover the base... Password-protect a website directory Add simple HTTP authentication for a staging or private directory while understanding that it is... Recover Customer Portal access when email or two-factor authentication is unavailable Account recovery requires identity and authority checks when the normal password-reset or... Understand domain transfer locks and 60-day restrictions A transfer can be blocked by registrar locks, recent registration or transfer, or a... Prepare safe diagnostics for a support ticket Provide enough technical evidence to reproduce the issue while removing passwords, payment data,... Understand account owners, users and contacts Give each person the correct level of Customer Portal access without sharing the account owner's... Change a hosting mailbox password Change only the selected mailbox password, then update every device and application that uses... Remove secrets and personal data from screenshots and logs Redact only the copy being shared and preserve an unaltered original securely when it may be... Update WordPress core, plugins and themes safely Use a backup, compatibility review and staged change sequence instead of pressing Update All on... Resolve an email certificate or server-name warning A certificate warning usually means the application is connecting to a hostname that is not... Recover a compromised WordPress website Contain the incident, preserve evidence, restore trustworthy code and close the route used by the... Investigate email rejection caused by IP or domain reputation Reputation rejections require the exact remote response, a review of recent sending and... Use a catch-all mailbox carefully A catch-all receives mail sent to otherwise nonexistent addresses at a domain, but usually...