Managing A Compromised Website - Revision history

Flubber at 23:45, 16 January 2019

2019-01-16T23:45:21Z

Danzmo: /* Post Compromised Suggestions */

2019-01-08T22:17:59Z

Post Compromised Suggestions

← Older revision		Revision as of 16:17, 8 January 2019
Line 50:		Line 50:
	#: Do not keep your site’s passwords the same after being compromised. Changing all passwords associated with your development is a must. XMission suggests using passwords that are no less then 12 characters and they should have Capitals, Numbers and Special Characters in them. Remember to change all User and Database Password.		#: Do not keep your site’s passwords the same after being compromised. Changing all passwords associated with your development is a must. XMission suggests using passwords that are no less then 12 characters and they should have Capitals, Numbers and Special Characters in them. Remember to change all User and Database Password.
	# '''Update!'''		# '''Update!'''
	#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers are specifically locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress ~~Tool Kit~~ that allows you to set Auto-Update and security Harding. It is recommend to complete use this kit and secure your website. (For more information please visit our [[WordPress_Toolkit \| WordPress Toolkit]] Help page)		#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers are specifically locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress ToolKit that allows you to set Auto-Update and security Harding. It is recommend to complete use this kit and secure your website. (For more information please visit our [[WordPress_Toolkit \| WordPress Toolkit]] Help page)
	# '''Security Plugins'''		# '''Security Plugins'''
	#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.		#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.

Danzmo: /* Post Compromised Suggestions */

2019-01-08T22:12:57Z

Post Compromised Suggestions

← Older revision		Revision as of 16:12, 8 January 2019
Line 50:		Line 50:
	#: Do not keep your site’s passwords the same after being compromised. Changing all passwords associated with your development is a must. XMission suggests using passwords that are no less then 12 characters and they should have Capitals, Numbers and Special Characters in them. Remember to change all User and Database Password.		#: Do not keep your site’s passwords the same after being compromised. Changing all passwords associated with your development is a must. XMission suggests using passwords that are no less then 12 characters and they should have Capitals, Numbers and Special Characters in them. Remember to change all User and Database Password.
	# '''Update!'''		# '''Update!'''
	#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers are specifically locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress Tool Kit that allows you to set Auto-Update and security Harding. It is recommend to complete use this kit and secure your website. (For more information please visit our WordPress Toolkit Help page)		#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers are specifically locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress Tool Kit that allows you to set Auto-Update and security Harding. It is recommend to complete use this kit and secure your website. (For more information please visit our [[WordPress_Toolkit \| WordPress Toolkit]] Help page)
	# '''Security Plugins'''		# '''Security Plugins'''
	#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.		#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.

Squarshy: /* How to start */

2019-01-08T18:00:03Z

How to start

← Older revision		Revision as of 12:00, 8 January 2019
Line 37:		Line 37:
	# '''Re-install your CMS Core'''		# '''Re-install your CMS Core'''
	#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''		#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''
	#: * WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code affecting in the core files, the most likely attack vector. Make sure you re0install the same version or newer software than your website is currently using.		#: WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code affecting in the core files, the most likely attack vector. Make sure you re0install the same version or newer software than your website is currently using.
			#: For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place.
	#: * For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place. #: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]		#: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]
	#: * [https://www.itoctopus.com/how-to-reinstall-joomla Replace Joomla Core]		#: * [https://www.itoctopus.com/how-to-reinstall-joomla Replace Joomla Core]
	#: * [https://www.drupal.org/docs/8/update/update-core-manually Replace Drupal Core]		#: * [https://www.drupal.org/docs/8/update/update-core-manually Replace Drupal Core]

Squarshy: /* How to start */

2019-01-08T17:58:13Z

How to start

← Older revision		Revision as of 11:58, 8 January 2019
Line 38:		Line 38:
	#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''		#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''
	#: * WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code affecting in the core files, the most likely attack vector. Make sure you re0install the same version or newer software than your website is currently using.		#: * WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code affecting in the core files, the most likely attack vector. Make sure you re0install the same version or newer software than your website is currently using.

	#: * For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place. #: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]		#: * For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place. #: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]
	#: * [https://www.itoctopus.com/how-to-reinstall-joomla Replace Joomla Core]		#: * [https://www.itoctopus.com/how-to-reinstall-joomla Replace Joomla Core]

Squarshy: /* Post Compromised Suggestions */

2019-01-08T17:57:26Z

Post Compromised Suggestions

← Older revision		Revision as of 11:57, 8 January 2019
Line 51:		Line 51:
	#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers are specifically locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress Tool Kit that allows you to set Auto-Update and security Harding. It is recommend to complete use this kit and secure your website. (For more information please visit our WordPress Toolkit Help page)		#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers are specifically locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress Tool Kit that allows you to set Auto-Update and security Harding. It is recommend to complete use this kit and secure your website. (For more information please visit our WordPress Toolkit Help page)
	# '''Security Plugins'''		# '''Security Plugins'''
	#: There are ~~Website~~ Security ~~Plugin’s~~ available for ~~most~~ CMS ~~Development~~. ~~You can get~~ Free or Paid versions and it is strongly recommend to install ~~them~~. XMission currently recommends ~~to use~~ Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of ~~website~~ changes.		#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.
	#:* [https://wordpress.org/plugins/sucuri-scanner/ Sucuri for WordPress]		#:* [https://wordpress.org/plugins/sucuri-scanner/ Sucuri for WordPress]
	#:* [https://wordpress.org/plugins/wordfence/ Wordfence for WordPress]		#:* [https://wordpress.org/plugins/wordfence/ Wordfence for WordPress]
	#:* [https://wordpress.org/plugins/cloudflare/ Cloudflare for WordPress]		#:* [https://wordpress.org/plugins/cloudflare/ Cloudflare for WordPress]

Squarshy: /* How to start */

2019-01-08T17:56:01Z

How to start

← Older revision		Revision as of 11:56, 8 January 2019
Line 28:		Line 28:
	#: * Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backup’s but they should not be relied on as our backups can also contain the compromise you are experiencing.		#: * Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backup’s but they should not be relied on as our backups can also contain the compromise you are experiencing.
	#: * ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''		#: * ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''
	# '''Deactivate and Remove ~~non-used~~ or ~~not needed~~ Plugins and Themes'''		# '''Deactivate and Remove unused or unneeded Plugins and Themes'''
	#: Check your CMS Dashboard for installed Themes and Plugins.		#: Check your CMS Dashboard for installed Themes and Plugins.
	#: ~~If there is any listed that your website is~~ not ~~using remove them~~. You should only have one theme and ~~the required~~ plugins ~~to allow your site to render~~.		#: Remove unused and inactive plugins and themes, especially ones you do not recognize or recall installing. You should only have one theme and necessary plugins installed. Additional, dormant themes are potential attack vectors.
	# '''Remove any “old” code/installations'''		# '''Remove any “old” code/installations'''
	#: If you have re-developed or re-designed your website, it is common to keep the old site available for reference. However ~~its common that~~ the old code is ~~how~~ hackers gain access to your site. ~~Instead of keeping~~ old ~~directories or .old file extensions~~.		#: If you have re-developed or re-designed your website, it is common to keep the old site available for reference. However, the old code is a potential backdoor for hackers to gain access to your site. You should download then remove old code from the server if you need to archive it.
	# '''Check users and roles'''		# '''Check users and roles'''
	#: ~~Most development today allows~~ for different user access ~~and they can be given limited role access~~. It is recommended to check all your user accounts and ensure that they have the correct role for their usage. Only administrators and developers should have full access. ~~Any~~ other ~~account~~ should ~~be limited to writing blog’s or subscribers~~.		#: Many Content Management Systems (CMS) allow for different user access levels. It is recommended to check all your user accounts and ensure that they have the correct role for their usage. Only administrators and developers should have full access. All other accounts should have an access level that does not permit editing of critical files.
	# '''Re-install your CMS Core'''		# '''Re-install your CMS Core'''
	#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''		#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''
	#: * ~~CMS Development like~~ WordPress allows you to reinstall the WordPress Core files and ~~not affect your development~~. This ~~can help~~ remove any compromised code affecting ~~its integrity~~. ~~You will want to make~~ sure you ~~reinstall~~ the same version or newer software your website is currently using~~. (if a older is used it will most likely to kill your website)~~.		#: * WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code affecting in the core files, the most likely attack vector. Make sure you re0install the same version or newer software than your website is currently using.
	#: * For WordPress Development, ~~be sure not~~ to use the reinstall options in your dashboard. Use your SFTP application to drag and drop the ~~versions~~. ~~You can replace the following directories safely:~~		#: * For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place. #: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]
	~~#:# /wp-admin~~
	~~#:# /wp-includes~~
	#: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]
	#: * [https://www.itoctopus.com/how-to-reinstall-joomla Replace Joomla Core]		#: * [https://www.itoctopus.com/how-to-reinstall-joomla Replace Joomla Core]
	#: * [https://www.drupal.org/docs/8/update/update-core-manually Replace Drupal Core]		#: * [https://www.drupal.org/docs/8/update/update-core-manually Replace Drupal Core]

Danzmo: /* Post Compromised Suggestions */

2018-12-27T23:02:17Z

Post Compromised Suggestions

← Older revision		Revision as of 17:02, 27 December 2018
Line 55:		Line 55:
	# '''Security Plugins'''		# '''Security Plugins'''
	#: There are Website Security Plugin’s available for most CMS Development. You can get Free or Paid versions and it is strongly recommend to install them. XMission currently recommends to use Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of website changes.		#: There are Website Security Plugin’s available for most CMS Development. You can get Free or Paid versions and it is strongly recommend to install them. XMission currently recommends to use Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of website changes.
			#:* [https://wordpress.org/plugins/sucuri-scanner/ Sucuri for WordPress]
			#:* [https://wordpress.org/plugins/wordfence/ Wordfence for WordPress]
			#:* [https://wordpress.org/plugins/cloudflare/ Cloudflare for WordPress]

Danzmo: /* How to start */

2018-12-27T22:52:03Z

How to start

← Older revision		Revision as of 16:52, 27 December 2018
Line 26:		Line 26:

	# '''Create a Backup'''		# '''Create a Backup'''
	#: Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backup’s but they should not be relied on as our backups can also contain the compromise you are experiencing.		#: * Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backup’s but they should not be relied on as our backups can also contain the compromise you are experiencing.
	#: ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''		#: * ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''
	# '''Deactivate and Remove non-used or not needed Plugins and Themes'''		# '''Deactivate and Remove non-used or not needed Plugins and Themes'''
	#: Check your CMS Dashboard for installed Themes and Plugins.		#: Check your CMS Dashboard for installed Themes and Plugins.
Line 37:		Line 37:
	# '''Re-install your CMS Core'''		# '''Re-install your CMS Core'''
	#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''		#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''
	#: CMS Development like WordPress allows you to reinstall the WordPress Core files and not affect your development. This can help remove any compromised code affecting its integrity. You will want to make sure you reinstall the same version or newer software your website is currently using. (if a older is used it will most likely to kill your website).		#: * CMS Development like WordPress allows you to reinstall the WordPress Core files and not affect your development. This can help remove any compromised code affecting its integrity. You will want to make sure you reinstall the same version or newer software your website is currently using. (if a older is used it will most likely to kill your website).
	#: For WordPress Development, be sure not to use the reinstall options in your dashboard. Use your SFTP application to drag and drop the versions. You can replace the following directories safely:		#: * For WordPress Development, be sure not to use the reinstall options in your dashboard. Use your SFTP application to drag and drop the versions. You can replace the following directories safely:
	#:# /wp-admin		#:# /wp-admin
	#:# /wp-includes		#:# /wp-includes

Danzmo: /* How to start */

2018-12-27T22:51:11Z

How to start

← Older revision		Revision as of 16:51, 27 December 2018
Line 27:		Line 27:
	# '''Create a Backup'''		# '''Create a Backup'''
	#: Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backup’s but they should not be relied on as our backups can also contain the compromise you are experiencing.		#: Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backup’s but they should not be relied on as our backups can also contain the compromise you are experiencing.
			#: ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''
	# '''Deactivate and Remove non-used or not needed Plugins and Themes'''		# '''Deactivate and Remove non-used or not needed Plugins and Themes'''
	#: Check your CMS Dashboard for installed Themes and Plugins.		#: Check your CMS Dashboard for installed Themes and Plugins.

← Older revision		Revision as of 17:45, 16 January 2019
Line 1:		Line 1:
	XMission has notified you or you have found that your website has become compromised. This can not only be frustrating but it can affect your online business as well as your host provider. Hacked or compromised websites can cause Spam or Malicious email to be sent under your business name as well as prevent your site from loading or redirect users to a non-associated website. We want to assist by providing a ~~few~~ “how-to” if it happened to you.		XMission has notified you or you have found that your website has become compromised. This can not only be frustrating but it can affect your online business as well as your host provider. Hacked or compromised websites can cause Spam or Malicious email to be sent under your business name as well as prevent your site from loading or redirect users to a non-associated website. We want to assist by providing a “how-to” if it happened to you.

	Not all hacks are the same, so when looking into options, please keep in mind:		Not all hacks are the same, so when looking into options, please keep in mind:

	* ~~Symptom’s~~ change from time-to-time.		* Symptoms change from time-to-time.
	* ~~Scan’s~~ may not find everything on ~~its~~ first pass.		* Scans may not find everything on a first pass.
	* ~~Database’s~~ may also be hacked.		* Databases may also be hacked.
	* HTML Code is also vulnerable.		* HTML Code is also vulnerable.

Line 21:		Line 21:
	* You can visibly see that your site has been hacked when you open it in the browser.		* You can visibly see that your site has been hacked when you open it in the browser.

	Below you will find a some steps that may help you start working through the compromise process. Again, not all compromises are the same, some of these suggestions may not ~~assist in~~ cleaning your site.		Below you will find a some steps that may help you start working through the compromise process. Again, not all compromises are the same so some of these suggestions may not be applicable when cleaning your site.

	== How to start ==		== How to start ==

	# '''Create a Backup'''		# '''Create a Backup'''
	#: * Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep ~~backup’s~~ but they should not be relied on as our backups can also contain the compromise you are experiencing.		#: * Backups are critical, and should be performed regularly to ensure the operation of your online business keeps moving forward. Before you do any work on your website, create a local backup of your site. This should apply when working on your site all together (page updates, new content or compromises). XMission does keep backups but they should not be relied on as our backups can also contain the compromise you are experiencing.
	#: * ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''		#: * ''NOTE: You will want to ensure that you are creating backups of both your Web-Hosting Files and Database.''
	# '''Deactivate and Remove unused or unneeded Plugins and Themes'''		# '''Deactivate and Remove unused or unneeded Plugins and Themes'''
	#: Check your CMS Dashboard for installed Themes and Plugins.		#: Check your CMS Dashboard for installed Themes and Plugins.
	#: Remove unused and inactive plugins and themes, especially ones you do not recognize or recall installing. You should only have one theme and necessary plugins installed. Additional, dormant themes are potential attack vectors.		#: Remove unused and inactive plugins and themes, especially ones you do not recognize or recall installing. You should only have one theme and necessary plugins installed. Additional, dormant themes are potential attack vectors. XMission strongly recommends using as few plugins as possible to mitigate risk.
	# '''Remove any “old” code/installations'''		# '''Remove any “old” code/installations'''
	#: If you have re-developed or re-designed your website, it is common to keep the old site available for reference. However, the old code is a potential backdoor for hackers to gain access to your site. You should download then remove old code from the server if you need to archive it.		#: If you have re-developed or re-designed your website, it is common to keep the old site available for reference. However, the old code is a potential backdoor for hackers to gain access to your site. You should download then remove old code from the server if you need to archive it.
Line 37:		Line 37:
	# '''Re-install your CMS Core'''		# '''Re-install your CMS Core'''
	#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''		#: ''(PLEASE: refer to your CMS instructions to complete this process correctly)''
	#: WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code ~~affecting~~ in the core files, the most likely attack vector. Make sure you ~~re0install~~ the same version or newer software than your website is currently using.		#: WordPress allows you to reinstall the WordPress Core files without affecting your website layout and content. This action will remove any compromised code in the core files, the most likely attack vector. Make sure you reinstall the same version or newer software than your website is currently using. Regularly upgrading to the newest WordPress code is highly recommended.
	#: For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place.		#: For WordPress Development, DO NOT to use the reinstall options in your dashboard -- Use your SFTP or FTP application to drag and drop the new files and folders in place.
	#: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]		#: * [https://codex.wordpress.org/Upgrading_WordPress#Step_1:_Replace_WordPress_files Replace WordPress Core]
Line 48:		Line 48:

	# '''Change your passwords'''		# '''Change your passwords'''
	#: Do not keep your site’s passwords the same after being compromised. Changing all passwords associated with your development is a must. XMission suggests using passwords that are no less then 12 characters and they should have Capitals, Numbers and Special Characters in them. Remember to change all User and Database ~~Password~~.		#: Do not keep your site’s passwords the same after being compromised. Changing all passwords associated with your development is a must. XMission suggests using passwords that are no less then 12 characters and they should either have multiple words strung together or mix Capitals, Numbers and Special Characters in them. Remember to change all User and Database Passwords.
	# '''Update!'''		# '''Update!'''
	#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers ~~are specifically~~ locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress ToolKit that allows you to set Auto-Update and security Harding. It is ~~recommend~~ to ~~complete~~ use this ~~kit~~ and secure your website. (For more information please visit our [[WordPress_Toolkit \| WordPress Toolkit]] Help page)		#: Keeping your CMS Development updated will ensure that found vulnerabilities by the programmers will have the require security patches installed. Hackers often locate files that are out-of-date and use the known vulnerability to gain access to your site. Setting Auto-Updates is strongly recommended if your CMS Supports it. XMission’s Shared Hosting Platform has a WordPress ToolKit that allows you to set Auto-Update and security Harding. It is strongly recommended to use this toolkit and secure your website. (For more information please visit our [[WordPress_Toolkit \| WordPress Toolkit]] Help page)
	# '''Security Plugins'''		# '''Security Plugins'''
	#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.		#: There are many Security Plugins available for popular CMS installation. Most offer Free or Paid versions and it is strongly recommend to install at least one security plugin. XMission currently recommends Sucuri Web-Security or WordFence Web-Security. These tools will assist with blocking malicious log-in attempts and can notify you of changes to files and user accounts.