# How to set up hotlink protection in cPanel

> Stop other sites from linking directly to your images and files with cPanel's Hotlink Protection.

Source: https://www.kualo.com/knowledgebase/cpanel-files-ftp/how-to-setup-hotlink-protection-in-cpanel
Updated: 2026-06-11

---

**Hotlink protection** stops other websites from linking directly to files on your site - most commonly images. Without it, another site can embed your images using their own pages, which displays your content on their site while using up *your* bandwidth. With hotlink protection on, those direct links are blocked or redirected, while your own pages keep working normally.

## Turn on hotlink protection

1. Log in to cPanel.
2. In the **Security** section, click **Hotlink Protection**.
3. If it shows as disabled, click **Enable**.

![The Hotlink Protection settings in cPanel](https://kb-cdn.kualo.com/d1/c0/d1c0d081853588daee2bfa2006627a4edc69272a.png)

## Configure the settings

- **URLs to allow access** - the sites that are allowed to link directly to your files. cPanel pre-fills this with your own domains; add any other sites you want to permit, one per line.
- **Block direct access for the following extensions** - the file types to protect, as a comma-separated list. The default `jpg,jpeg,gif,png,bmp` covers common image formats; add others (such as `pdf` or `mp4`) if you need to.
- **Allow direct requests** - leave this unticked for the strongest protection. Tick it only if you need files to open when their URL is typed straight into a browser.
- **Redirect the request to the following URL** - optionally send blocked requests to another page (for example a "no hotlinking" image, or your home page) instead of simply failing.

When you have set the options, click **Submit**.

:::tip
Hotlink protection only covers the file types you list. It is great for stopping image theft and bandwidth drain, but remember that anyone determined enough can still save and re-upload a file - it is a deterrent, not a lock.
:::

To turn it off again, return to this page and click **Disable**.

If you need a hand, our support team is available 24/7 - just [open a support ticket](/knowledgebase/getting-started/how-to-create-a-support-ticket-in-mykualo).


---

_Source: Kualo Knowledgebase — https://www.kualo.com/knowledgebase/cpanel-files-ftp/how-to-setup-hotlink-protection-in-cpanel · © Kualo Ltd._