Protect your ElySpace account with a unique password and two-factor authentication, give others their own login, and watch out for fake emails.
Your client area controls your websites, domains and payments. Someone who gets in could move your domain or delete your site. These steps keep that from happening.
1. Use a strong, unique password
Use a password you don't use anywhere else, at least 10 characters long. A password manager creates and remembers one for you. See Change your client area password.
2. Turn on two-factor authentication
With 2FA, a stolen password alone isn't enough: the login also asks for a code from your phone. Save the backup code somewhere safe. See Turn on two-factor authentication (2FA).
3. Never share your login
Your web designer, developer or accountant should get their own login with only the permissions they need. Remove their access when the work is done. See Give other people access to your account (users).
4. Keep your email address safe
Password resets go to the email address of your account. If someone gets into that mailbox, they can get into your ElySpace account too. Protect your mailbox with a strong password and 2FA as well, and make sure the address on your account is one you still use (Change the email address you log in with).
5. Watch out for fake emails
- We never ask for your client area password, by email, phone, chat or in a ticket.
- Be suspicious of emails that rush you: "your domain expires today, pay here", "your account will be deleted".
- Don't click login or payment links in such emails. Open my.elyspace.com yourself instead and check your invoices and services there.
- Not sure whether an email is really from us? Compare it with the list in Email History: every email we send about your account is saved there.
6. Log out on shared computers
Don't tick Remember Me on a computer others use, and log out when you're done. See Log in to and out of the client area.
7. Check your account now and then
- Account > User Management: does everyone in the list still need access?
- Account > Contacts: are the contacts still right?
- Billing > Payment Methods: remove cards you no longer use. See Save, change or remove a card.
8. Secure your hosting too
Your cPanel, mailboxes and WordPress have their own passwords. Use different, strong passwords for each, keep WordPress and its plugins updated, and scan your site regularly. See Secure your WordPress site from cPanel and Scan your website for malware with Imunify360.
Think someone got into your account?
- Change your client area password right away, and the password of your email account.
- Turn on 2FA if it isn't on yet.
- Check the users, contacts and payment methods as above.
- Open a ticket and tell us what you noticed. We'll help you check your account and services.
Related articles
- Turn on two-factor authentication (2FA)
- Change your client area password
- Give other people access to your account (users)
- Your website was hacked: what to do first
Still stuck? Open a support ticket and we'll help.
