Protect sign-in

Use a separate, sufficiently long password for the client area. Check the Hoststare URL before signing in and avoid entering details through unexpected login or payment links. Sign out on shared devices and avoid saving server secrets in their browser.

Manage the VPS and backups

Keep the actual guest operating system updated and limit unnecessary ports and accounts. After configuring SSH keys, test a second connection and recovery method before changing the original login settings. Store backups outside the VPS and test restoration in an isolated environment.

Suspected compromise

Preserve times, errors and verifiable records and report the issue through a ticket or [email protected]. Use a trusted device; do not enter a new password on a suspected infected device. Support reviews identity and feasible action. Never send your current password or private key.