Security
Content Security Policy Error: Causes and Solutions
If you’re experiencing issues with third-party services like embedded videos, forms, chat tools, or tracking scripts, your browser may display an error such as: “Content…
Enable Multi-Factor Authentication (MFA) on Staq
Multi-Factor Authentication (MFA) adds an extra layer of security to your Staq account by requiring two forms of identification before access is granted. This feature…
Enabling 2FA for WordPress Sites
This is a big one! We believe this is the first time a Managed Hosting platform for WordPress has applied 2FA as a built-in security…
How to Change the WP Login URL
Changing the WordPress login URL is a simple yet effective security measure that can help protect your site from unauthorized access attempts, especially those from…
How to enable XML-RPC
By default, Staq disables XML-RPC for security reasons. XML-RPC is a protocol that allows communication between WordPress and external applications, but it is also a…
SendGrid IP Access Management
If you’ve ever had your SendGrid API key compromised, you’ll know how painful the aftermath can be — bad actors sending millions of spam emails…
Staq enforces HSTS by default
By default, all websites hosted on Staq have HSTS (HTTP Strict Transport Security) enforced. This is achieved at the NGINX server level through the response…
Staq’s Multi-Layer Security Architecture
Understanding Staq’s Multi-Layer Security Architecture At Staq, every WordPress site runs on a secure, multi-layered architecture designed to protect your websites from network attacks, malware…
Unblocking WordPress REST API Access
Staq automatically restricts public access to sensitive REST API endpoints — particularly the /wp-json/wp/v2/users/ endpoint. Since this endpoint is blocked automatically out of the box,…