Website security is an ongoing routine. This week, check five basics that help reduce risk and make it easier to respond if something goes wrong.
Start with the accounts you control
Check your client area, hosting account, website administrator accounts and business email. Security settings differ between services; enable available protections separately for each account.
1. Keep the software you use current
1. Check for updates to your website software, plugins, and themes. For WordPress, use trusted sources and review compatibility. Take a backup before significant changes.
2. Review unused plugins and themes. Remove what you no longer need after checking that it is not required by the site.
2. Make account access deliberate
3. Use a strong, unique password for each important account and store it in a password manager.
4. Enable two-factor authentication where available. Review who has administrator access, give people only the permissions they need, and remove access when it is no longer required.
3. Keep recovery ready
5. Confirm that you have suitable backups and know the restore process. A recovery plan is part of security, not a replacement for updates and careful account access. If your site behaves unexpectedly, contact support promptly with the domain and what you observed.
Pause before an unexpected sign-in request
Open your client area using a trusted bookmark or by typing the address yourself. Do not share passwords, recovery codes, or one-time sign-in codes by email. If a message seems suspicious, contact us through your client area.
If you suspect a problem
Contact support through your trusted client-area address and describe what changed and when. Avoid repeatedly making changes to a site you suspect is compromised. Do not send passwords, private backup files or recovery codes in a ticket or email.
Open your hosting services · Contact Barqweb support
Further reading
Reviewed 19 October 2026. Available tools and options depend on your hosting service.
