Skip to content

Advanced tools

These tools are for people who work on the server side of a website: shells, scheduled jobs, apps, DNS records and AI helpers. Your hosting provider can switch some of them off, and some depend on your plan. Where a tool is not available, its page says so.

SSH access

Security › SSH access lets you sign in to your account over SSH or SFTP with a key. There is no password login. While SSH is off, your account has no shell at all.

The page shows a Status card and your keys. If your plan does not include SSH, there is no Turn SSH on button. You can still add and remove keys, and they are ready when SSH is switched on.

To turn SSH on:

  1. Open Security › SSH access.
  2. Press Turn SSH on.
  3. Add a key (see below). With no key installed, nobody can log in, and the page warns you.

Once SSH is on, the page shows the host, port, user name, your directory and the exact command to sign in. You land in your own directory and see only your own files.

Use a key you already have

  1. Open Use a key you already have.
  2. Enter a name and paste the public half of the key (the .pub file). Never paste a private key.
  3. Press Add this key.

Make a new key

  1. Open Generate a pair.
  2. Enter a name and choose a type: ed25519 (shorter and faster) or rsa 4096 (for older clients).
  3. Add a passphrase if you want one. It encrypts the key file, and nobody can recover it for you.
  4. Press Generate.

The page then shows Copy the private key now. This is the only time you see the private key. The panel does not store it.

  • Download for OpenSSH gives the file for ssh, scp and rsync. Save it in your .ssh folder with no extension, and set it to chmod 600.
  • Download for PuTTY (.ppk) gives the file PuTTY, WinSCP and FileZilla ask for.
  • Copy copies the key text.

Making a key does not install it yet. In the Your keys list, open Manage and press Use for this account. Stop using it removes it again.

Under Manage you can also Replace this key if you lost the file. A new pair is made under the same name, shown once, and installed wherever the old one was. Delete removes the record.

To turn SSH off, press Turn SSH off. A session that is already open keeps running until it ends.

Terminal

Security › Terminal gives you a shell in your browser. It runs as your account, inside a jail. It sees your own files and a minimal system, and not other customers or the server's configuration. Programs such as sudo cannot get extra rights there. Its work counts against your plan's disk, memory and process limits.

The terminal is off until you turn it on:

  1. Open Security › Terminal.
  2. Press Switch the terminal on. This does not turn on SSH.
  3. Press Open a terminal.

The terminal switches itself off after four hours. Press Switch it off now to end it sooner, which also ends any open session. Press End session to close one session.

You can copy and paste with the usual shortcuts. The page lists them. The panel records that a session was opened and closed, but not what you type.

The page needs JavaScript to draw the terminal.

Cron jobs

Software › Cron jobs runs something on a schedule. Each job runs as your account, inside your plan's limits, and sees only your own files.

The top of the page shows how many jobs your plan allows, the shortest interval and the longest a job may run. These limits are set by your hosting provider.

To add a job:

  1. Press New cron job.
  2. Set When. You can choose a common schedule or fill in the five fields: minute, hour, day, month and weekday. Weekday 0 is Sunday.
  3. Choose what to run:
    • PHP script runs a file in your account, with the PHP version you pick. Use a path such as public_html/wp-cron.php.
    • Web address opens a URL, like a visitor.
    • Command runs anything a shell can run. It is only available on plans with SSH.
  4. Optionally add a Description, and Stop it after a number of minutes. Yours can only be shorter than the server's limit.
  5. Tick Email the account's address if it fails if you want failure emails (at most one an hour).
  6. Press Create job.

In the job list you can use the switch to turn a job on or off, press Run now, edit it, view the output of its last run, or press Delete. A job never runs on top of itself: if the last run is still going, the next one is skipped.

Containers

Software › Containers runs an application from a container image, such as Uptime Kuma, n8n or Ghost, and shows it on one of your websites. It runs as your account, inside your plan's limits.

If the page says containers are not set up on this server, or that your plan does not include them, the tool is not available to you.

Install an app from a template

The Install an app section lists ready-made templates. Each card shows what the app does and how much disk and memory it needs.

  1. Press Install on a template.
  2. In the pop-up, choose a name and the website to show it on. Only websites that are not already used by something else are offered.
  3. Press Install. Downloading takes a minute or two. The page follows the job.

The panel makes your own first login inside the app. It shows that login once. Save it, then press I have saved it.

Run your own image

Press Custom image at the top. Enter:

  • a name (lowercase letters, digits and single dashes, up to 24 characters; it cannot be changed later)
  • an image from Docker Hub, GitHub (ghcr.io/…) or Quay (quay.io/…). Use a version tag rather than latest.
  • the port the app listens on inside the container
  • optionally the data folder inside the container, and environment variables, one NAME=value per line

Then press Create application.

Manage your applications

Your applications lists each app. You can start or stop it, open its Log, Edit it, use Website to show it on a site, or Remove it. Apps also have backups and updates. Images and data use your account's disk. The page shows how many applications your plan allows.

Node.js and Python apps

You set these up per website, not from a menu. The pages named Node.js and Python in the main menu are for administrators only.

  1. Open Websites and choose a domain.
  2. Open the Advanced tab and find the Application row. Open it.
  3. Choose Node.js or Python. A runtime shows up here only if your hosting provider has installed it.

For Node.js, choose the version, a Start file (default server.js), a Folder and whether to run npm run build. Press Set up. Your app must listen on process.env.SOCKET. process.env.PORT holds the same value.

For Python, choose the version and Kind: WSGI for Django and Flask, or ASGI for FastAPI and Starlette. Enter the Application (for example myproject.wsgi:application), a Folder and the Requirements file. Press Set up.

A site runs one application at a time. When it is stopped, visitors see an "application stopped" page, not your code. The site's page offers Start, Stop, Restart and Settings and log. The Application row also has Install and build (Node.js) or Build (Python), a log, and Remove the application…, where you choose to delete the code or keep the files. Upload and edit your code with the File manager, FTP or Git.

DNS zones

DNS › DNS zones edits the records of your domains. If you have more than one domain, pick it at the top and press Show.

A card at the top says where the domain's DNS is answered. If it is answered by other nameservers, your changes here are saved but nobody sees them. Make them where those nameservers are managed, or point the domain's nameservers at your hosting provider at your registrar.

To add a record:

  1. Press + Add record.
  2. Choose the type: A, AAAA, CNAME, MX, TXT, SRV or CAA.
  3. Fill in the fields. The name @ means the domain itself. Choose a TTL.
  4. Press Add record.

To change a record, press Edit, then Save changes. To remove one, press Delete and confirm. Deleting a record that keeps your website or mail working shows a warning first. The SOA record and the main nameserver records are managed by the panel and cannot be edited.

Use the tabs to filter by Web, Mail, Text and Other, and the search box to find a record. If standard records are missing, Rebuild missing adds only those and changes nothing else.

Cloudflare

DNS › Cloudflare puts your domains on your own Cloudflare account. The panel's DNS stays the source: every change you make on the DNS page is copied to Cloudflare within seconds.

Connect your token

  1. On Cloudflare, open My Profile › API Tokens. Press Create Token, then Create Custom Token. Use an API token and never the Global API Key.
  2. Give it Zone › Zone › Edit, Zone › DNS › Edit, Zone › Zone Settings › Edit, Zone › Cache Purge › Purge and Account › Account Settings › Read. Set Zone Resources to All zones.
  3. Copy the token. Cloudflare shows it once.
  4. In the panel, open Your Cloudflare account, paste the token and press Connect.

The panel shows only the end of the token. Use another token replaces it. Disconnect makes the panel forget the token and stop copying changes. Your domains stay on Cloudflare as they are.

  • Add a domain puts a new domain on Cloudflare with all your records. Every name starts grey (DNS only), so nothing changes for visitors until you switch the domain's nameservers at your registrar to the two Cloudflare shows. The domain is then Waiting for nameservers, then Active.
  • If a domain is already on Cloudflare, press Link. You compare the differences and choose which side to keep for each one.

Manage a domain

Press Manage on an active domain. You can switch each record between Proxied (orange cloud) and DNS only. Mail names always stay grey. You can also press Sync now, set the SSL mode, switch Under attack mode or Development mode on and off, and clear Cloudflare's cache. Stop managing on Cloudflare stops the copying. It can also delete the domain from your Cloudflare account if you tick that box.

Malware Watch

Security › Malware Watch checks every PHP and script file your websites save, the moment it is written. A file that is almost certainly a back door is moved to quarantine and you get an email. Nothing is deleted unless you delete it.

A badge at the top shows whether it is watching. If your hosting provider has not switched it on, new files are not checked, but earlier findings stay listed.

The page has three tabs:

  • Quarantined: files moved out of your website.
  • Suspicious: files left in place for you to look at.
  • Marked safe: files you said are yours.

Press Open on a file to see why it was flagged, who wrote it and when. Then choose:

  • Quarantined file: Restore and mark safe, which puts the file back where it was, or Delete forever. Restore only if you are sure the file is yours. If a page broke after a file was quarantined, restore it from here.
  • Suspicious file: Quarantine it, It's mine — mark safe, or Delete forever.

Tick several files to act on them together. Quarantined files still count toward your disk until you delete them.

Collaborators

Security › Collaborators lets you invite people, such as a developer or designer, to help with your account. Each person gets their own login and sees only the parts you choose. Everything they change is recorded under their name.

Your plan sets how many people you can invite. If it allows none, or the server cannot send email, the Invite someone button is not shown.

To invite someone:

  1. Press Invite someone.
  2. Enter their name and email.
  3. Under What they can use, tick areas: Files, FTP, Databases, Apps, DNS, Mail, Sites & SSL, Stats and Backups.
  4. Under Which domains, choose All domains or Only these. This limits DNS, Mail, Sites & SSL and Stats. Files, FTP, Apps and Databases always cover the whole account, so give those only to someone you trust with all of it.
  5. Press Send invite.

They get an email with a link that works once, for 48 hours, to choose a password. If it expires, press Send again. Press Withdraw to cancel an invitation.

For active people, Edit access changes what they can use, and Remove ends their access at once. When you remove someone, you can also take away what they made, such as an FTP or database login.

Under Sign-in rules, Require it makes two-factor sign-in compulsory for collaborators. Each one sets it up on first sign-in and cannot open the account until then. Collaborators never get SSH, cron jobs, the terminal, your password, plan changes or account removal.

AI access

Security › AI access connects your own AI app, such as Claude or Cursor, to your hosting over MCP. The app can do only what you tick, only on your own account. The server runs no AI for you. If your plan does not include it, the page says so.

  1. Press New AI connection.
  2. Enter a name, and choose when it stops working: 30 days, 90 days, 1 year or never.
  3. Tick what it may do. Looking around is always allowed, and changes are not until you tick them.
  4. Press Create connection.

The address and key are shown once. Copy them into your AI app. The page has setup steps for several apps. If you lose the key, revoke the connection and make a new one.

Some apps connect only through their own sign-in (OAuth) and not with a pasted key. This works only if your hosting provider has turned it on. You then sign in to the panel and press Allow.

What your AI did lists every request, including refused ones. Turn Undo on to put back some changes for seven days. Press Revoke to cut a connection off at once. An AI can never delete your account, change your password or two-factor, run commands, or see passwords.

AI assistant

Security › AI assistant is a chat inside the panel. It runs on your own AI key, and your AI provider (not your hosting provider) bills you for it directly. It looks around freely, and it changes nothing until you press Apply. It is only shown when your plan includes it.

  1. Open Your AI key.
  2. Choose the provider (Claude, OpenAI, Google Gemini, Grok, or another OpenAI-compatible address) and paste your API key.
  3. Choose a model. Read the model list from your provider fills it in.
  4. Optionally set a monthly limit in million tokens.
  5. Tick what it may suggest changing, and press Save.

Before first use you set an assistant PIN or password. Your key and chats are locked with it. Lock now closes the assistant sooner. New chat starts another conversation. Remove key deletes your key, settings and chats.