There are several ways to secure and safe your admin panel by:
-
Access from Specific IPs
-
Folder Protection
-
Two-factor authentication — Email Authentication / Duo Security (Addon)
-
Enabling SSL / HTTPS
1. Access from Specific IPs
Step 1: Login your IWP panel
Step 2: Go to Security Settings and enter your specific [ IP or IPs ], i.e. Settings → Security Tab → “Allow Account Access From These Ips Only” Section → Enter your IP then click the [ Add IP ] button and make sure to click [ Save Changes ] button.
2. Folder Protection
Step 1: Login your IWP panel
Step 2: Go to Security Settings then Enter Credentials, i.e. Settings → Security Tab → “HTTP Authentication / Folder Protection” Section → Enter your Pre-configured Folder Protection credentials and make sure to Click [ Save Changes ] button.
Note: For Pre-Configuration please refer other article —How do I HTTP Authenticate/Folder Protect my IWP directory?
When you enter your HTTP Authentication/Folder Protection credentials in this section, then your username and password will help you with the following tasks:
-
To run Easycron efficiently. EasyCron will not run otherwise.
-
To help you run fsock effectively.
3. Two-factor authentication — Email Authentication
Step 1: Login your IWP panel
Step 2: Go to Security Settings then select “Email Authentication”, i.e. Settings → Security Tab → “Two-Factor Authentication” Section → Just click on [ Email Authentication ] option make sure to Click [ Save Changes ] button.
Two-factor authentication — Duo Security (Addon)
Step 1: Login your IWP panel
Step 2: Go to Security Settings then enter “Integration Details”, i.e. Settings → Security Tab → “Two-Factor Authentication” Section → Select [ Duo Security ] then enter your Duo security integration details, make sure to Click [ Save Changes ] button.
Note: For Duo integration please refer the article — How to integrate Duo Security to your admin panel?
4. Enabling SSL / HTTPS
Step 1: Login your IWP panel
Step 2: Go to Security Settings then “Enable HTTPS”, i.e. Settings → Security Tab → “Last section” → Make sure click and check the Https is working or not then Just click [ ] Enable HTTPS check box, then Click [ Save Changes ] button.
Note: Looking detailed documentation for How to enable SSL/HTTPS for the IWP admin panel?
IWP does not support CloudFare SSL or any Proxy SSL. We will ensure that this option is available by the earliest. To know more check out our security page.