Web hosting security and backups

Cartoon .shop domain extension mascot: a pink .shop with two big eyes and a wide smile, waving with both hands

Most hacked websites are small sites with old software and weak passwords, not targets of elaborate attacks. A few basics from your host and from you prevent almost all of it.

The basics

Hostinger plans include free SSL; check which security features and backups come with each plan.

Questions answered on this page

Key terms

Web hosting free SSL
Free SSL from Let's Encrypt or the host is standard now; make sure it renews automatically.
Secure web host
A secure host offers SSL, a firewall, malware scanning, isolation between accounts and two-factor login.
Website hosting backup service
Use the host's daily backups plus an off-site copy you control.
Ddos protected hosting
Basic DDoS protection is common; a CDN adds more for larger attacks.
Malware scanning web host
Malware scanning is often included; automatic removal is often an add-on.
Hosting server uptime tracker
Free monitors such as UptimeRobot check your site every few minutes and alert you.
Hosting with custom email
Most plans include email on your domain; set MX, SPF, DKIM and DMARC records. Or use business email.
Safest web host check
Check for SSL, backups, a firewall, malware scanning, two-factor login and a clear security page.

Need a domain for it?

Search names that are free now on the deleted domains list, browse expired domains with history, or check any name in the domain checker. New to old names? Read building a site on an expired domain.

More hosting guides

Frequently asked questions

Which web hosting includes automatic malware scanning and removal?

Many shared and managed hosts include malware scanning; automatic removal is less common and often a paid add-on. Check the plan details, and keep your own backups to restore from.

How do I get a free wildcard SSL certificate from my web host?

Let's Encrypt issues free wildcard certificates, which need a DNS check. Some hosts automate this in their control panel; otherwise a CDN such as Cloudflare can provide one, or you can request it with an ACME client.

Which hosting services include built-in DDoS attack protection?

Many hosts include basic network-level DDoS protection, and CDNs such as Cloudflare add more. Check what each plan covers; large attacks usually need a CDN or a specialist service.

How do I set up custom email domain names on my web host?

Create mailboxes such as you@yourdomain in your host's email section, then make sure the domain's MX, SPF, DKIM and DMARC records point to that email service. Or use a separate business email service.

Does the physical location of a web hosting server affect SEO rankings?

Only slightly, mainly through speed. Search engines use other signals, such as your domain, language and content, to decide which country a site is for. A CDN removes most of the speed difference.

Which web hosts offer free daily backups on basic plans?

Some hosts include daily backups even on entry plans; many include only weekly backups or charge for them. Read the plan details, and check how long backups are kept.

How do I secure a website from hacking attempts on a budget?

Keep software updated, use strong unique passwords with two-factor login, remove unused plugins, use free SSL and a free CDN firewall, and keep off-site backups.

Which web hosting providers have excellent uptime tracking dashboards?

Many hosts show resource and uptime information in their panel, and some publish a status page. Free external monitors such as UptimeRobot give an independent view.

What is an enterprise-level CDN and do I need it with my host?

A CDN copies your site to servers around the world so it loads fast everywhere and absorbs attacks. Enterprise plans add support and advanced security; most small sites do well with a free or low-cost CDN.

How do I set up custom error pages on a shared hosting server?

Most control panels have an error pages section; otherwise add a line such as ErrorDocument 404 /404.html to your .htaccess file on Apache or LiteSpeed servers. WordPress uses the theme's 404 template.

Last updated 15 October 2026