Guides: website security explained simply
16 guides for website owners without an IT department. Clearly explained, with concrete steps.
Uptime & reachability
Redirect http to https, with and without www, the right way
How to redirect every version of your address to a single encrypted page. With ready-made configurations for Apache, Nginx and WordPress.
Website not loading? The most common causes and what you can do
Your website won’t load or shows an error message? Here is how to find out what is wrong in a few minutes and fix the most common causes yourself.
Using public Wi-Fi safely, in cafés, hotels and at the airport
How dangerous open hotspots really are, which attacks exist and the simple rules that keep you safe while browsing on the go.
Website monitoring, so you notice outages before your customers do
How uptime monitoring works, what it costs and what to watch out for when setting it up. For small businesses, freelancers and clubs.
Security & privacy
Website security for small businesses, the checklist
Ten steps to protect your business website against the most common attacks. No IT department needed and a manageable amount of effort.
Google Fonts, Analytics and co., the privacy-friendly way
Google Fonts, Analytics and co. send your visitors’ data to third parties. Here is how to find third-party services on your website and replace them in a privacy-friendly way.
How to secure WordPress in twelve steps
WordPress is the most popular target for automated attacks. These twelve steps close the most common gaps, no programming skills required.
Security headers explained, with setup instructions for Apache, Nginx and WordPress
HSTS, Content-Security-Policy, X-Frame-Options and more, explained in plain English. With ready-to-copy configuration lines for the most common web servers.
SSL certificate expired? How to fix the problem
Browsers show a warning because your SSL certificate has expired? Here is how to fix it quickly and make sure it doesn’t happen again.
Domain & email
How to set up SPF, DKIM and DMARC, so nobody can spoof email in your name
What the three records do, how to set them up step by step and why your emails land in spam more often without them. With examples to copy.
Domain expired, what now? How to get it back
Website gone, emails bouncing? What happens after a domain expires, how long you can still save it and how to prevent it in future.
DNS records explained simply, from A record to TXT
What A, AAAA, CNAME, MX, NS and TXT mean, when you need which one and why changes sometimes take hours. For everyone who manages their own domain.
How to spot phishing and see through fake emails and messages
Fake invoices, parcel texts, account lockouts: how to recognise phishing, check links properly and know what to do if you have already clicked.
Passwords & data
Two-factor authentication, the most important protection for your accounts
Why a password alone is no longer enough, which second factors exist and which accounts you should secure first. With a step-by-step guide to get started.
How to choose the right password manager, and what really matters
A password manager is the easiest step towards better security. These 7 points help you find the right one for you, your family or your business.