Walkthrough · Beginner · 20 minutes
How to Secure Your Email Account
How to defend the one account capable of resetting every other account you hold, without the guessing — the steps in order, the snag ahead of time, and the tip our support team repeats daily.
The short answer
One line covers it: defend the one account capable of resetting every other account you hold — a beginner-level job of roughly 20 minutes.
Below is the full run of steps, the error most people trip over, and the short cut worth remembering. On Hosting & Domains plans several steps are already automated away — the guide marks each one.
By the Hosting & Domains team · Reviewed 18 August 2026
Beginner
Skill rating
20 minutes
Time budget
5
Steps in total
24/7
Support on call
No technical background needed. This walkthrough was written for first-timers, proven on our own hardware, and honest about which parts are genuinely tricky rather than merely unfamiliar.
A promise before step one: nothing here is a one-way door. Any step with teeth is flagged, and the way back is printed beside it.
The outline first, then the detail
Set out end to end, the route is: treat it as the master key, use a unique generated password, put two-factor on both doors, inspect the forwarders and filters and review how the account is reached.
Every stage is a few minutes of unhurried clicking — the total depends mostly on how well you already know the control panel. The detailed instructions are further down; read the whole path once before you begin.
One caution before you click anything
The forwarder left behind. A compromised mailbox 'fixed' with a password change keeps leaking through the forward rule planted during the break-in, and the audit step is what actually closes the incident.
Forewarned is genuinely forearmed here. This one mistake accounts for most of the frustration the topic ever causes — and it disappears entirely once somebody points it out.
A habit worth borrowing
Give the mailbox and the hosting panel separate passwords, both generated and both filed in your manager. Two doors into two different rooms, since one key opening both halves the work for anyone trying them.
A minute spent now repays itself every time this job comes round again — and like almost every hosting job, come round it will.
The steps already done before you arrive
Steps that never deserved your time are taken out: certificates issue and reissue themselves, the installer handles application setup, the daily copy absorbs the what-ifs, and per-site settings live in a panel rather than a configuration file. The guide covers the remainder — the part that is actually about your site.
Should a step still misfire, support answers at any hour with an actual fix rather than a knowledge-base link and a shrug. Half the guides on this site began as repeat patterns in our ticket queue.
Why this job is shorter on our plans
Tutorials written against imaginary hosting go stale fast. Ours are written against the real thing: the same panel, installer and defaults waiting in your account.
Mailboxes at your own name are part of the plan — mail is included, not sold back to you at the checkout.
- Every step checked exactly as published
- The snag named before it arrives
- The dull steps taken out of your way
- People reachable at any hour you stall
Why Hosting & Domains
Standard on every plan
Help that keeps your hours, not ours
Stuck on step three at midnight? Support answers at any hour, mid-walkthrough included.
Works exactly as printed
Every step is proven on the platform we run — none of the 'your host may vary' hedging.
The snag, flagged up front
The classic error for this particular task is named before step one, which is how 20 minutes stays 20 minutes.
Honest about how big it is
Defend the one account capable of resetting every other account you hold is a beginner-level job — set aside 20 minutes, with the platform-absorbed steps marked.
Jargon never charges you
Every term is defined on the spot or linked to the jargon buster — nothing assumes prior knowledge.
Taken from real tickets
These guides came out of the support queue, so every snag flagged is one people genuinely hit.
Quick Start
Order placed to site online
- 1
Treat it as the master key
Password resets for your bank, your hosting and everything else go through email. However well you protect your other accounts, the mailbox sets the ceiling for all of them.
- 2
Use a unique generated password
Made by a password manager and used nowhere else. Email passwords that surface in breach dumps get tried against mailboxes within hours, and reuse is the fuel that attack runs on.
- 3
Put two-factor on both doors
Both webmail and the hosting control panel offer it. The panel counts twice over, because anybody inside it can read and reset every mailbox on the account without your password at all.
- 4
Inspect the forwarders and filters
An intruder with brief access leaves a silent forward and a rule that destroys the evidence. Read both lists carefully and remove anything you did not put there.
- 5
Review how the account is reached
Check last-login records where they are offered, turn off protocols you never use, and revoke app passwords that no longer match a device you still own.
Built In
Fitted to every plan
- LiteSpeed caching in the server itself rather than bolted on by plugin
- NVMe SSD storage on every tier, not only the dear ones
- cPanel, which is what most of the industry already runs
- The name's first year included when you order annually
- Your existing site brought across by our engineers, at no charge
- 99.9% uptime as the target, watched around the clock
- SSH, Git and Composer on the developer plans
- Softaculous included for one-click application installs
- Spam and virus screening on every mailbox by default
- Staging copies for trying a change before it goes live
Frequently Asked
The questions that come up most
What are the signs of a compromised mailbox?
Look out for a password that suddenly stops working, Sent messages you never wrote, contacts saying they have had spam from you, forwarders or filters you do not recognise, or login alerts from places you have never been. Meet any one of them and it is time to reset and audit immediately.
Is keeping IMAP enabled a security problem?
There is nothing unsafe about IMAP over SSL behind a strong, unique password. The real risk lies in reused passwords and app credentials nobody keeps track of. Turn off the protocols you truly never use and keep proper credentials on the ones you do.
What happens when I outgrow the plan?
You upgrade in place. Plan changes are made from the client area with no migration and no downtime, and the range runs from small shared accounts through VPS to full dedicated machines. Growth becomes a setting on the account rather than a search for a new host.
Will you move my existing site free of charge?
Yes. Open a ticket with the login for your current host and we bring the lot across — files, databases, mailboxes, configuration. You check the copy before DNS moves, and the old site keeps taking traffic right up to the moment the new one serves it, so nobody meets a gap.
Keep reading
How to Deploy a Site with Git
Replace uploading files by hand with a deployment you can repeat and undo — advanced level, about an hour.
How to Migrate Email to a New Host
Relocate mailboxes to a new host with full history preserved and zero losses — intermediate level, about 1–2 hours, or one support ticket.
Best Most Secure Shared Hosting
The same call put as a buyer's guide: what to verify, what to ignore, and the plan we would sign.
VPS Hosting
KVM virtual servers — root access, DDoS filtering, one flat monthly figure.
Dedicated Servers
Bare metal with a control panel included and the pricing stated up front.
Changing hosts? Run through our checklist first.
A plain order of work for a move nobody visiting will notice: which files go over first, how to carry the mail across without losing a message, when exactly to repoint DNS, and the two mistakes behind nearly every outage we are asked to rescue.
Put the site on ground you own.
Free SSL, a free migration, renewals billed at the original rate, and people on support around the clock. That is the whole of it.
View VPS Hosting plans