How to Set Up Hotlink Protection in cPanel

Hotlinking is when another website embeds your images directly on their pages — using your server, and your bandwidth, to display content on someone else’s site. It’s a quiet drain that can add up, and cPanel’s Hotlink Protection puts a stop to it. Here’s how.

What hotlinking actually costs you

When a site hotlinks your image, every visitor to their page loads that image from your server. You pay the bandwidth for traffic you never receive. For a popular image being hotlinked across many sites, this can consume a meaningful chunk of your bandwidth allowance — and effectively lets others use your hosting for free.

How hotlink protection works

Hotlink protection tells your server to only serve images and other files when the request comes from your own pages. If a request comes from another domain, the server refuses to serve the file. The other site is left with a broken image, while your legitimate visitors see everything normally.

Turning it on

1. In cPanel, open Hotlink Protection under the Security section.
2. Confirm the list of URLs allowed to access your files — your own domain (with and without www, and both http and https) should be included.
3. Specify which file extensions to protect, typically image types like jpg, jpeg, png and gif.
4. Click Enable.

Allowing legitimate exceptions

If you genuinely want certain external sites to be able to display your images — a partner site, or a service you use — add their domains to the allowed list. Everything not on the list gets blocked. This lets you permit the connections you want while shutting out the freeloaders.

Don’t forget direct access

By default, someone typing your image URL directly into their browser can still see it (there’s no referring page to check). You can choose whether to allow that. Blocking direct access too is more thorough, though it can occasionally interfere with legitimate uses like image previews in some tools.

When to use it

Hotlink protection is most worthwhile for image-heavy sites — photography portfolios, product catalogues, galleries — where your images are attractive targets. If you notice unexplained bandwidth usage, hotlinking is one thing worth ruling out. Check your access logs for external sites requesting your image files.

It’s a set-and-forget protection that quietly saves bandwidth. If you’re seeing high bandwidth usage and aren’t sure why, we can help you check whether hotlinking is the cause.