---
title: "Providing SSH Access"
slug: "ssh-access-guide"
description: "Step-by-step guide for providing SSH access to WP Vanguard for deep scans. Covers Cloudways, cPanel, and DigitalOcean."
order: 8
---

## Why SSH Is Needed

The deep server scan needs to read files directly on your server to detect malware hidden inside PHP code, database entries, and upload directories. SSH (Secure Shell) provides a secure, encrypted connection to your server for this purpose.

We only use SSH to read files during scans. We do not modify any files unless you request a cleanup.

## What You'll Need

To add SSH credentials in WP Vanguard, you'll provide:

- **Host**: Your server's IP address or hostname
- **Port**: Usually 22 (default SSH port)
- **Username**: Your SSH username
- **Authentication**: Either an SSH private key or password

## Cloudways

1. Log into your Cloudways dashboard
2. Go to **Servers** and select your server
3. Click **Master Credentials** tab
4. Copy the **Public IP**, **Username**, and **Password**
5. The SSH port is **22**
6. In WP Vanguard, enter these credentials when adding your site

The WordPress path on Cloudways is typically:
`/home/master/applications/{app-folder}/public_html/`

You can find the exact path under **Application** > **Application Settings**.

## cPanel / WHM

### Using Password Authentication

1. Log into cPanel
2. Your SSH host is your server's IP or domain
3. Your username is your cPanel username
4. Your password is your cPanel password
5. Port is **22**

### Using SSH Keys (Recommended)

1. In cPanel, go to **Security** > **SSH Access** > **Manage SSH Keys**
2. Click **Generate a New Key**
3. Set a key name and passphrase
4. Click **Generate Key**
5. Go back to **Manage SSH Keys** and click **Manage** next to your private key
6. Click **View/Download** to download the private key
7. Paste the private key content in WP Vanguard when adding your site

The WordPress path on cPanel is typically:
`/home/{username}/public_html/`

## DigitalOcean Droplets

1. When creating a Droplet, add your SSH key or use the password emailed to you
2. Your host is the Droplet's IP address
3. Your username is **root** (or a sudo user you've created)
4. Port is **22**

If you set up a sudo user (recommended):
```
ssh root@your-droplet-ip
adduser wpvanguard
usermod -aG sudo wpvanguard
```

The WordPress path depends on your setup but is commonly:
`/var/www/html/` or `/var/www/your-domain/`

## Other Hosting Providers

The general steps are the same for any hosting provider:

1. Find your server's IP address or hostname
2. Get your SSH username and password (or generate an SSH key pair)
3. Confirm the SSH port (almost always 22)
4. Find the path to your WordPress installation

If your host doesn't provide SSH access, you won't be able to use the deep scan. The [free surface scanner](/docs/free-scanner) is still available and doesn't require SSH.

## Troubleshooting

**Connection refused**: Confirm SSH is enabled on your server and port 22 is open in your firewall.

**Authentication failed**: Double-check your username and password. If using a key, make sure you're pasting the private key (not the public key).

**Permission denied**: Your SSH user needs read access to the WordPress files. On shared hosting, this is usually your cPanel user.