> ## Documentation Index
> Fetch the complete documentation index at: https://kb.hosting.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing HTTP Strict Transport Security (HSTS) for your site

> HTTP Strict Transport Security (HSTS) helps protect against several types of malicious attacks. Learn how to manage HSTS for your hosting account in this article.

This article discusses [HTTP Strict Transport Security (HSTS)](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security) and how to manage it for your site.

## About HSTS

HTTP Strict Transport Security (HSTS) instructs web browsers to only use secure connections (*https\://* ) for all future requests when communicating with a web site. Doing so helps prevent SSL protocol attacks, SSL stripping, cookie hijacking, and other attempts to circumvent SSL protection.

## Managing HSTS on Linux

By default, **HSTS is enabled** on all Linux-based managed hosting accounts. You do not need to take any additional steps to use HSTS with your site.

However, there may be scenarios where you want to disable HSTS for your site, such as during site development or testing. To do this, follow these steps:

1. Using [SSH](/docs/using-ssh-secure-shell), the [cPanel File Manager](/docs/cpanel-file-manager), or the [Plesk File Manager](/docs/getting-started-with-the-plesk-file-manager), navigate to the document root of your site (usually the *public\_html* folder).

2. Use your preferred text editor to open the *.htaccess* file.
   > 📘 Note
   >
   > If the *.htaccess* file does not already exist, create it.

3. Copy the following line, and then paste it into the *.htaccess* file:

   ```
   Header always unset Strict-Transport-Security
   ```

4. Save your changes to the *.htaccess* file. HSTS is now disabled for your site. To re-enable HSTS, delete or comment out the line of text you pasted in step 3.

## More information

For more information about HSTS, please visit [https://en.wikipedia.org/wiki/HTTP\_Strict\_Transport\_Security](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security).

## Related articles

* [Redirecting visitors to SSL connections](/docs/redirecting-users-to-ssl-connections)

* [Generating and renewing Let’s Encrypt SSL certificates in Plesk](/docs/generating-and-renewing-lets-encrypt-ssl-certificates-in-plesk)