SSH Root Access on Managed Servers
For security, SSH root login on Jolt Managed servers (cPanel and Plesk) is configured with PermitRootLogin prohibit-password. This means the root account can only log in using an SSH public key — root login with a password is refused, even if the password is correct. Customer-level SSH accounts (cPanel users,…
JCP trusted IPs not working (401/403 or timeout errors)
If you’ve added an IP address to your site’s Trusted IPs but you’re still having issues with 401 or 403 errors when trying to access your site, here are some things to check first: Are you using Cloudflare? If your domain is using Cloudflare, ensure that the Cloudflare toggle is…
I can’t access my JCP server or site – have I been blocked?
If you’ve recently been trying to login to SFTP or SSH and you suddenly can’t access your JCP server(s) or site(s), it’s possible your IP address has been blocked by our security. How to get your IP address unblocked If you suspect you have been blocked, simply login to your…
Enabling AutoSSL for a Domain on a Reseller Account
Your domain isn’t showing an SSL certificate? If you’re on a reseller account, AutoSSL can issue and install one automatically. Here’s how to get it set up. What’s Happening Without an active SSL certificate, your domain won’t work over HTTPS. Visitors will see browser security warnings or the connection will…
WordPress brute force attacks – do you need to worry?
Brute force attacks are one of the most common threats facing WordPress sites. If your WordPress security plugin has been flagging these attempts, you’re not alone — and the good news is that the risk is very manageable with the right precautions in place. What is a brute force attack?…
How to Reissue Your SSL Certificate
Overview Due to industry changes, SSL certificates are now issued for 199 days and may need to be reissued during their lifetime. This guide shows you how to reissue your SSL certificate through your client area. Step 1: Log in to your account Login to your Jolt customer account at…
SSL Certificate Validity Changes Explained (199-Day Certificates)
Why SSL Certificates Are Now Valid for 199 Days Overview You may notice that newly issued SSL certificates are now valid for 199 days instead of 365 days. This is part of an industry-wide change introduced by Certificate Authorities (such as Sectigo and DigiCert) to improve security standards across the…
Website malware & what to do next
If you’ve found malware or suspect your site has been infected, we’re here to help. How to know if your site is infected with malware Most infected sites may have the following symptoms: Randomly redirecting to third-party sites Suspicious content changes (e.g. defacement, new pages, unrelated content) Unrecognised admin-level users…
Enable Bad Bot Blocking Protection & Rate Limiting Mode
Keep automated attackers off your site. JCP blocks malicious bots by default, but you can fine-tune protection or add exceptions for legitimate bots you trust. Step 1: Open Security Settings Log into www.jolt.co.uk/kb and open your Jolt Control Panel. Click the Settings icon beside the site you want to protect.…
Adding an SSH key in Jolt Control Panel
Sometimes you’ll want to allow SSH/SFTP access to your sites to a colleague or a web developer, but maybe you’re not comfortable with handing over the SSH/SFTP password. Another method for allowing access is to add a public SSH key to the site. 💡Note: This guide assumes you know how…