The platform handles infrastructure security; this checklist covers your side.
Account
- Unique 12+ character password on your RoboHost account
- Never share your login — use team access instead
- Review audit logs monthly for actions you don't recognize
Site files
- Keep CMS/plugins updated — we alert on known-vulnerable versions
- Don't upload files that execute as config (e.g., writable config.php at 666)
- Remove install/setup scripts after deployment
Forms
- All forms need CSRF tokens (ours are built-in)
- Rate-limit contact forms against spam
- Validate on the server, not just the browser