Bluehost Security Scope of Support
The Bluehost Security Scope of Support outlines the security-related services available to help protect, recover, and maintain websites and hosting accounts. Many security tasks can be completed through self-service Knowledge Base articles or with assistance from Bluehost Support, while more advanced configurations, troubleshooting, remediation, or ongoing maintenance may require Advanced Support, Professional Services, or other paid solutions, depending on the complexity of the request.
SSL Certificate Management
SSL Certificate Management includes tasks related to securing websites with SSL certificates and HTTPS encryption. Customers can often complete common SSL tasks using Bluehost Knowledge Base guides or with assistance from Support, while more complex troubleshooting, advanced configurations, and specialized SSL services may require a paid support option.
| Tasks | Free w/ Hosting | Paid Support | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Free | Paid | Guide Explain / Share KB | Recovery: Get Service Back Online | Advanced Support Live | Pro Support Live | ||||
| ResolutionFix Underlying Issue | Maintenance: Ongoing care, updates, and prevention | Adv. Tech Troubleshooting | Design/Content / UX Migration | Optimization: Performance, scale, efficiency | |||||
| Install SSL certificate (AutoSSL / Let's Encrypt via cPanel) | ✔ | ✔ | ✔ | ||||||
| Troubleshoot SSL errors (mixed content, cert mismatch, expired) | ✔ | ✔ | ✔ | ✔ | |||||
| SSL validation request (DV, OV, EV validation steps) | ✔ | ✔ | ✔ | ||||||
| Set up Let's Encrypt SSL (manual/wildcard) | ✔ | ✔ | ✔ | ||||||
| Generate CSR (Certificate Signing Request) | ✔ | ✔ | ✔ | ||||||
| Order / purchase a premium SSL certificate | ✔ | ✔ | ✔ | ||||||
| Install 3rd party SSL certificate (upload CRT/KEY/CA bundle) | ✔ | ✔ | ✔ | ✔ | |||||
| Force HTTPS / redirect HTTP to HTTPS | ✔ | ✔ | ✔ | ||||||
| Fix mixed content errors (HTTP resources on HTTPS page) | ✔ | ✔ | ✔ | ||||||
Website Malware and ToS Violations
Website Malware and ToS Violations support covers malware notifications, account security concerns, abuse reports, phishing complaints, spam investigations, and Terms of Service enforcement. Some issues can be addressed with guidance from Support or available Knowledge Base resources, while malware remediation, advanced troubleshooting, and recovery services may require paid assistance or third-party security solutions.
| Tasks | Free w/ Hosting | Paid Support | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Free | Paid | Guide Explain / Share KB | Recovery: Get Service Back Online | Advanced Support Live | Pro Support Live | ||||
| ResolutionFix Underlying Issue | Maintenance: Ongoing care, updates, and prevention | Adv. Tech Troubleshooting | Design Content / UX Migration | Optimization: Performance, scale, efficiency | |||||
| Notify customer of malware detection/site suspension | ✔ | ✔ | ✔ | ||||||
| Guide the customer to Monarx / security plugin for malware removal | ✔ | ✔ | |||||||
| Assist with post-malware cleanup (restore from backup, file permissions) | ✔ | ✔ | ✔ | ||||||
| Handle fraud/phishing account complaints (ToS enforcement) | ✔ | ✔ | |||||||
| Handle email misuse/spam sending complaints | ✔ | ✔ | |||||||
| Handle resource overuse/abuse complaints | ✔ | ✔ | |||||||
| Handle legal / DMCA / court order requests | ✔ | ✔ | |||||||
Domain and Security Settings
Domain and Security Settings support includes security-related configurations such as DNSSEC management, Cloudflare setup, file permissions, PHP version updates, and account security measures. Customers can use Bluehost documentation and Support guidance for many configuration tasks, while advanced hardening, complex troubleshooting, and ongoing security optimization may be available through paid service offerings.
| Tasks | Free w/ Hosting | Paid Support | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Free | Paid | Guide/Explain / Share KB | Recovery: Get Service Back Online | Advanced Support Live | Pro Support Live | ||||
| ResolutionFix Underlying Issue | Maintenance: Ongoing care, updates, and prevention | Adv. Tech Troubleshooting | Design Content / UX Migration | Optimization: Performance, scale, efficiency | |||||
| Configure Monarx security plugin (activate, scan, resolve alerts) | ✔ | ✔ | ✔ | ✔ | |||||
| Enable/configure Cloudflare (DDoS protection, WAF) | ✔ | ✔ | ✔ | ✔ | |||||
| Manage DNSSEC (add/remove DS records at registrar) | ✔ | ✔ | ✔ | ||||||
| Reset file and directory permissions to secure defaults | ✔ | ✔ | ✔ | ||||||
| Adjust the PHP version for security compliance | ✔ | ✔ | ✔ | ||||||
| Review and harden wp-config.php / .htaccess settings | ✔ | ✔ | ✔ | ✔ | |||||
| Enable two-factor authentication (account-level) | ✔ | ✔ | |||||||
| Verify domain ownership/account ownership for security changes | ✔ | ✔ | ✔ | ||||||
Backups and Recovery
Backups and Recovery support helps customers protect and restore website files, databases, and account data. Basic backup and recovery tasks can often be completed using Bluehost tools, Knowledge Base articles, or Support assistance, while more advanced recovery scenarios, migration support, and specialized backup services may require a paid support plan or additional products.
| Tasks | Free w/ Hosting | Paid Support | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Free | Paid | Guide/Explain / Share KB | Recovery: Get Service Back Online | Advanced Support Live | Pro Support Live | ||||
| ResolutionFix Underlying Issue | Maintenance: Ongoing care, updates, and prevention | Adv. Tech Troubleshooting | Design/Content / UX Migration | Optimization: Performance, scale, efficiency | |||||
| Generate a manual backup (full account/database) | ✔ | ✔ | ✔ | ||||||
| Restore a full account backup (cPanel / Jetpack) | ✔ | ✔ | ✔ | ||||||
| Restore individual files or directories from backup | ✔ | ✔ | ✔ | ||||||
| Restore a database from backup | ✔ | ✔ | ✔ | ||||||
| Download a backup file to the local machine | ✔ | ✔ | |||||||
| Configure automatic backups (cPanel / CodeGuard) | ✔ | ✔ | ✔ | ||||||
| Guide the customer through CodeGuard backup setup | ✔ | ✔ | ✔ | ||||||
| Guide the customer through Jetpack Backup setup | ✔ | ✔ | ✔ | ||||||
Summary
Bluehost offers a range of security-related support services to help customers protect, maintain, and recover their websites and hosting accounts. Many common security tasks can be completed through self-service Knowledge Base articles or with assistance from Bluehost Support teams. However, requests involving advanced troubleshooting, complex configurations, malware remediation, ongoing maintenance, or specialized security services may require Advanced Support, Professional Services, or third-party solutions. The tables below outline the level of assistance available for each security-related task, helping customers understand which services are included and when additional paid support may be required.
If you need further assistance, Bluehost Chat Support is available 24 hours a day, 7days a week while Bluehost Phone Support is available 7 days a week from 7 am-12 midnight EST.
- Chat Support - While on our website, you should see a CHAT bubble in the bottom right-hand corner of the page. Click anywhere on the bubble to begin a chat session.
- Phone Support -
- US: 888-401-4678
- International: +1 801-765-9400
You may also refer to our Knowledge Base articles to help answer common questions and guide you through various setup, configuration, and troubleshooting steps.