Skip to content

Feature Suggestions

← Your Ideas for Plesk

Please provide here your suggestion for new functionality for Plesk. We encourage you to review and vote for suggestions of others. The top-ranked suggestions are likely to be included in the next versions of Plesk.

Please write in English so that voters from all over the world can read and support your request.

For technical assistance, contact Plesk support
For questions, bug reports, discussions and free assistance, check our Forum and Facebook page
For additional information, see Documentation, Knowledge Base and Blog
Follow us on Twitter for more news on Plesk development

Off-topic posts will be removed from here

I suggest you...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback

30 results found

  1. make the DNSECC Extention for free

    18 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    1 comment  ·  Security  ·  Admin →

  2. Expand 2FA options: Yubikey, WebAuthn (FIDO, FIDO2, U2F), also HOTP counter-code for existing Google Authenticator

    Add two-factor-auth for YubiKey.

    235 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    50 comments  ·  Security  ·  Admin →

  3. change password next login

    Ask user to change password at next login screen after reset.
    We the providers could generate a temp password (customer asks for a reset), and after the first login screen, plesk will force ask from the client to change our temp password.

    79 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    2 comments  ·  Security  ·  Admin →

  4. Add option for minimum 12 characters in passwords

    Add option for minimum 8 characters in Plesk > Home > Tools & Settings > Security Policy > Password.

    You can label it as "Stronger".
    Going from 8 to 16 characters leaves a big step.
    We train our customers to user minimum 12 characters in their passwords (including lower/upper case, numbers and symbols).
    strength

    17 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    2 comments  ·  Security  ·  Admin →

  5. include OSCP stapling directives for secured sites and panel

    See http://forum.sp.parallels.com/threads/ocsp-stapling-for-the-plesk-panel.300280/ for the panel, but would need to be added for all domains also.

    13 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    4 comments  ·  Security  ·  Admin →
    completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Hi!

    The functionality is now available in the SSL It! Plesk Extension: https://ext.plesk.com/packages/3c4117f6-c05c-4d3b-9173-60f10096a9c4-sslit

    How to find it:
    1. install SSL It! Extension (it’s available for Plesk 17.8+)
    2. go to > SSL/TLS Certificates
    3. if there is no SSL Certificate installed on the domain – issue one (using, for example, free Let’s Encrypt SSL Certificate)
    4. if an SSL Certificate is installed on the domain, there is a switcher “OCSP Stapling”, turn it on
    5. Voila!

    We would appreciate hearing your feedback on the implementation of this functionality. Thanks in advance!

  6. Allow to use SHA256 (SHA-2) for Certificate Request.

    This time Plesk make's SHA-1 Certificate Request.

    66 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    8 comments  ·  Security  ·  Admin →

  7. Block the IP of the selected country in Firewall

    Firewall should be able to block the IP of the selected country. I have a lot of traffic from the IP 5.10. *. *

    713 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    141 comments  ·  Security  ·  Admin →
    completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    This functionality was added in Plesk 18.0.52 ( https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18052 ). We suggest you to update to Plesk 18.0.52 and check it out.

    The feature is based on ipsets and works out of the box.

    By default, the feature uses the free version of the DB-IP geolocation database, but also supports MaxMind DB's. 

    Feel free to share your feedback at at http://talk.plesk.com. --AA

  8. Change admin username

    It should be possible for the admin user to change his user login name. The name "admin" is not very secure, because it's easiert to hack via brute force. The hackers know, the name is "admin". If the user would be able to change his login name, it would increase the security of Plesk Panel.

    561 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    73 comments  ·  Security  ·  Admin →

  9. Add the option "Security of wp-content/uploads folder only"

    Securing the whole wp-content will break many commercial templates, while blocking script execution under the wp-content/uploads and wp-content/upgrade folder have no known side-effects.

    2 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →

  10. IP Addresses in access_ssl_log with NGINX

    Bug?

    No real IP Addresses from visitors in accessssllog when Ngnix is enable.

    Only Local IP Address will logged.
    Thats bad.

    1 vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
2 Next →
  • Don't see your idea?

Feature Suggestions

Categories

Feedback and Knowledge Base

(thinking…)