HOSTVON SECURITY
Built-in protections for your account. Clear responsibilities for your server. Understand how HostVon protects access, payments, and saved credentials—and how to secure the workloads you run.
01 / PLATFORM PROTECTIONS
From signing in to managing a server, specific controls help protect the actions and information associated with your HostVon account.
Email verification is required before ordering, and account passwords must be at least 12 characters. Password resets revoke existing sessions to help you regain control of your account.
Use a unique password and protect the email account you use for recovery.
Customer server controls, orders, and billing actions check the signed-in customer’s ownership before granting access. Knowing a server or order reference alone does not grant control of that resource.
Keep your console session private, especially on shared devices.
Card details are entered through Stripe-hosted checkout. HostVon verifies payment webhook signatures before processing events and uses payment references to connect billing activity to your order.
Review your order, billing term, and total before completing payment.
Saved application secrets and server passwords are encrypted with AES-256-GCM. Encryption keys are configured separately from the database. Server password reveal is limited to the owning customer.
Revealed server passwords hide after 30 seconds or when the window loses focus.
These controls describe HostVon’s account and service layer. No system is risk-free; your VPS software and data also need their own protections.
02 / SHARED RESPONSIBILITY
A Cloud VPS gives you flexibility and control. This division of responsibilities helps you plan the administration and recovery your workload needs.
| Security area | HostVon provides | You manage |
|---|---|---|
| Account access | Email verification, password reset session revocation, and authenticated access to the console. | A unique account password, a secure recovery email, and careful control of signed-in devices. |
| Server administration | Ownership checks on customer server controls and access to your provisioned resources. | Operating system updates, SSH access, local users, permissions, and software configuration. |
| Applications & networking | Hosting resources and the management actions available in your console. | Application updates, firewall rules, exposed ports, HTTPS, and any third-party credentials. |
| Secrets & data | Encryption of saved application secrets and server passwords in HostVon’s service records. | Data on your VPS, application secrets in your own software, and any workload-specific encryption. |
| Backups & recovery | Server management controls, including reinstallation when requested. | Independent backups, off-server copies, restore testing, and exporting data before reinstallation or service ends. |
03 / YOUR SECURITY BASELINE
Use this checklist when you launch a server, then revisit it as your software, team, and traffic change.
For your customer-managed VPSUse SSH keys where practical, review privileged access, and remove credentials or accounts you no longer need.
Configure a firewall, close unused ports, and avoid exposing databases or administration tools to the public internet.
Apply operating system and application security updates. Complete first-login setup before making a new application public.
Configure HTTPS for public applications and keep service credentials out of public repositories and application logs.
Keep backups outside your VPS and test a restoration. Verify you have the data you need before reinstalling or cancelling.
04 / A CLOSER LOOK
Understand the scope of your protections before you put a workload into production.
A standalone Cloud VPS gives you control of the software stack. You manage operating system and application updates, firewall configuration, access credentials, and backups. HostVon’s account and console protections do not replace administration of the software running inside your server.
No. AES-256-GCM protects application secrets and server passwords saved by HostVon. It is not a promise that every disk, file, database, or connection on your VPS is encrypted. Configure encryption and HTTPS for your own workload where needed.
An application image can simplify installation, but some applications need first-login setup, new credentials, external service accounts, or additional configuration. Review the installed application’s settings and documentation before exposing it to users.
Reinstallation erases server data. When hosting service ends, the server and its data may be removed. Export important content and verify independent backups beforehand. Stopping a server does not cancel its subscription, and cancelling renewal is separate from requesting deletion of account records.
Our Privacy Policy explains account information, service providers, retention, and privacy requests. The Terms & Conditions cover billing, acceptable use, cancellation, and service limitations.
SECURITY CONCERNS
Report suspected unauthorized access or a service security concern through your existing HostVon account or order communications. Include the affected server or order reference, what happened, and when you noticed it. Never send passwords, private keys, or full card details.