Reseller security

This guide explains how to protect your reseller account and your customers' accounts, how to manage passwords and access, and how to recognise a compromised hosting account.

Before you begin

• Your reseller sign-in details.
• Access to your reseller account's security settings in the panel.
• A plan for who on your team needs access.

Steps

1. Use a strong, unique password for the reseller account. Store it in a password manager. Never share it by email or chat.
2. Turn on two-step verification if the panel offers it for your account. See Account security.
3. Limit access. Give each person only the permissions they need. Remove access for people who leave your team.
4. Set strong passwords for every customer account when you create it, and share them only through a secure channel.
5. Keep backups of every important account, and test that you can restore one. See Website backups.
6. Prevent accidental deletion. Confirm before you delete a hosting user, and suspend an account instead when that is enough.
7. Watch for signs of compromise in your customers' accounts, such as unfamiliar files, sudden traffic or emails that customers did not send.

Deleting a user is permanent

Deleting a hosting user can remove their files, databases and email. Make a backup and confirm with the customer before you delete.

Expected result

Your reseller account uses a strong password and limited access, customer passwords are set securely, and you have tested backups.

If something goes wrong

• You see a sign-in you do not recognise. Change your reseller password at once, then contact support from the Client Area.
• A customer account looks compromised. Suspend it if needed, change its passwords, check the files and read Recognise a compromised account.
• You lost access to your sign-in. Use Password recovery, then contact support.

Related articles

• Account security
• Secure your hosting
• Recognise a compromised account
• Manage hosting users

Last reviewed

2026-10-27