Leech Protection is a security feature in cPanel designed to prevent the misuse of shared credentials or unauthorized access to password-protected directories on your website. When enabled, it safeguards against multiple logins from a single user, which could indicate that credentials have been shared or compromised.

It ensures that sensitive areas of your website remain secure by limiting failed login attempts and taking appropriate action when these limits are breached.

This feature is particularly useful for websites with restricted content, membership portals, or sensitive information. By setting login attempt limits and redirecting violators to a custom warning page, Leech Protection ensures that your site remains secure and that user access is carefully controlled. It’s an essential tool for maintaining the integrity and privacy of your protected directories.

Here’s how you can enable and use Leech Protection effectively.

Step-1 Log In To cPanel

Begin by logging into your cPanel dashboard. You can access this through your hosting account interface.

Step-2 Find The Leech Protection Tool

In your cPanel dashboard, navigate to the Security section and locate the Leech Protection option. Click on it to open the configuration settings.

Step-3 Choose The Directory to Protect

Browse your file structure and select the directory that requires protection. This is typically a password-restricted section of your website, such as a member-only area.

Step-4 Set Login Attempt Limits

Specify the maximum number of login attempts allowed within a certain time frame. For instance, you might allow only three failed attempts within an hour. This restriction helps prevent password abuse.

Step-5 Enable & Configure Leech Protection

Activate Leech Protection for the selected directory. Define what action should be taken when the login limit is exceeded, such as redirecting users to a warning page, disabling compromised accounts, or sending email notifications.

Step-6 Customize Advanced Options

If needed, whitelist trusted IP addresses to exempt them from Leech Protection. You can also configure an email address to receive alerts whenever leeching attempts are detected.

Step-7 Save & Test Your Settings

Save your changes to enable Leech Protection. Test the feature by attempting to exceed the login limit yourself, ensuring it performs as expected.

Leech Protection is a valuable tool for maintaining the security and integrity of your website’s protected directories. Regularly review and adjust its settings to stay ahead of potential threats.