Providing SSH Access

Why SSH Is Needed

The deep server scan needs to read files directly on your server to detect malware hidden inside PHP code, database entries, and upload directories. SSH (Secure Shell) provides a secure, encrypted connection to your server for this purpose.

We only use SSH to read files during scans. We do not modify any files unless you request a cleanup.

What You'll Need

To add SSH credentials in WP Vanguard, you'll provide:

• Host: Your server's IP address or hostname
• Port: Usually 22 (default SSH port)
• Username: Your SSH username
• Authentication: Either an SSH private key or password

Cloudways

1. Log into your Cloudways dashboard
2. Go to Servers and select your server
3. Click Master Credentials tab
4. Copy the Public IP, Username, and Password
5. The SSH port is 22
6. In WP Vanguard, enter these credentials when adding your site

The WordPress path on Cloudways is typically: /home/master/applications/{app-folder}/public_html/

You can find the exact path under Application > Application Settings.

cPanel / WHM

Using Password Authentication

1. Log into cPanel
2. Your SSH host is your server's IP or domain
3. Your username is your cPanel username
4. Your password is your cPanel password
5. Port is 22

Using SSH Keys (Recommended)

1. In cPanel, go to Security > SSH Access > Manage SSH Keys
2. Click Generate a New Key
3. Set a key name and passphrase
4. Click Generate Key
5. Go back to Manage SSH Keys and click Manage next to your private key
6. Click View/Download to download the private key
7. Paste the private key content in WP Vanguard when adding your site

The WordPress path on cPanel is typically: /home/{username}/public_html/

DigitalOcean Droplets

1. When creating a Droplet, add your SSH key or use the password emailed to you
2. Your host is the Droplet's IP address
3. Your username is root (or a sudo user you've created)
4. Port is 22

If you set up a sudo user (recommended):

ssh root@your-droplet-ip
adduser wpvanguard
usermod -aG sudo wpvanguard

The WordPress path depends on your setup but is commonly: /var/www/html/ or /var/www/your-domain/

Other Hosting Providers

The general steps are the same for any hosting provider:

1. Find your server's IP address or hostname
2. Get your SSH username and password (or generate an SSH key pair)
3. Confirm the SSH port (almost always 22)
4. Find the path to your WordPress installation

If your host doesn't provide SSH access, you won't be able to use the deep scan. The free surface scanner is still available and doesn't require SSH.

Troubleshooting

Connection refused: Confirm SSH is enabled on your server and port 22 is open in your firewall.

Authentication failed: Double-check your username and password. If using a key, make sure you're pasting the private key (not the public key).

Permission denied: Your SSH user needs read access to the WordPress files. On shared hosting, this is usually your cPanel user.