Security
Content Security Policy Error: Causes and Solutions
If you’re experiencing issues with third-party services like embedded videos, forms, chat tools, or tracking scripts, your browser may display an error such as: “Content…
Enable Multi-Factor Authentication (MFA) on Staq
Two-factor authentication sends a code by email at sign-in. Turn it on for your own login on My profile. Account owners can also require it…
Enabling 2FA for WordPress Sites
This is a big one! We believe this is the first time a Managed Hosting platform for WordPress has applied 2FA as a built-in security…
How to Change the WP Login URL
Changing the WordPress login URL is a simple yet effective security measure that can help protect your site from unauthorized access attempts, especially those from…
How to enable XML-RPC
XML-RPC is an Nginx toggle on the Access Control tab. Set it for one website on Staq Panel → Server → Nginx Config. Set the…
SendGrid IP Access Management
If you’ve ever had your SendGrid API key compromised, you’ll know how painful the aftermath can be — bad actors sending millions of spam emails…
Staq enforces HSTS by default
By default, all websites hosted on Staq have HSTS (HTTP Strict Transport Security) enforced. This is achieved at the NGINX server level through the response…
Staq’s Multi-Layer Security Architecture
Understanding Staq’s Multi-Layer Security Architecture At Staq, every WordPress site runs on a secure, multi-layered architecture designed to protect your websites from network attacks, malware…
Unblocking WordPress REST API Access
Staq automatically restricts public access to sensitive REST API endpoints — particularly the /wp-json/wp/v2/users/ endpoint. Since this endpoint is blocked automatically out of the box,…
