Protecting what you are responsible for.
WHY IT MATTERS MORE FOR YOU
A compromise of your reseller account affects every client on it.
THE ESSENTIALS
A strong unique password on your reseller account and WHM Two-factor authentication Your own machine kept clean and updated Secure credential storage, not a spreadsheet
CLIENT ACCOUNT PASSWORDS
Generated, not chosen. Sent securely, not in plain email.
Never reuse a password across client accounts.
WHO HAS ACCESS
If you have staff or contractors, give them their own access rather than sharing yours.
Remove it when they leave.
THE FTP PASSWORD PROBLEM
FTP clients store saved passwords in files that malware specifically targets.
If client sites are repeatedly compromised with no server-side explanation, check your own machine.
WHAT A COMPROMISE OF YOUR ACCOUNT MEANS
Every client site accessible. Every database. Every mailbox.
Treat your own security as proportionate to that.
IF YOU SUSPECT IT
Open a ticket immediately, change everything, and check every client account for changes.