10-10-2026, 04:12 PM
After installing aaPanel Free Edition, review its Global settings before creating websites. Change one item at a time and verify access afterwards. This guide explains the settings visible in our aaPanel Free 8.0.6 lab on Ubuntu 22.04.5, inspected on 10 October 2026.
1. Open Settings → Global
Use Search settings to find a specific item. The current interface groups network/access, HTTPS, authentication and interface preferences. Other tabs include Service, Alarm and Backup Restore. Older screenshots may group these options differently.
2. Set useful display preferences
Choose the Language you prefer and an Alias that identifies the server. Alias changes the panel title; it does not create a DNS record or rename a website. Theme and hidden-menu preferences affect how you use the panel. Keep essential sections visible while learning.
3. Check time and timezone
Confirm the server clock and selected timezone. Our lab uses UTC, which makes server logs easier to compare. Choose a timezone deliberately and remember it when reading logs or scheduling backups. The Sync control is for server time; changing the display language does not correct a wrong clock.
4. Understand default folders
The lab shows /www/wwwroot as the default site folder and /www/backup as the default backup folder. Each website belongs in its own site subdirectory. These defaults are not an instruction to put every site directly into /www. Changing a default is not a migration of existing website files. Check ownership, disk space and application paths before relocating data.
5. Panel backup is not a full website backup
Our Auto Backup Panel setting is enabled with 30 retained backups. The interface explicitly says its automatic backup does not include website data or MySQL data. Keep separate backups of website files and databases, store a copy off the VPS, and test restoration. A local backup folder will not protect you from losing the entire server. Do not use One-click clear backup while establishing your recovery plan.
6. Review session and access settings
Timeout controls idle-session logout; choose an appropriate duration for your working environment. Changing Panel port, Security Entrance, Domain or Authorized IP can interrupt access. Prepare working SSH/provider recovery access and test a fresh login after each change. Domain binding restricts which hostname can access the panel; wait until its DNS and HTTPS work. A management-IP allowlist requires a stable address.
7. Keep panel HTTPS enabled
Check certificate trust, expiry and renewal instead of assuming an HTTPS switch guarantees a valid certificate. The screenshot below shows the lab certificate status captured for our security walkthrough. A panel certificate does not enable HTTPS for your websites.
![[Image: attachment.php?aid=5]](https://adminsforum.com/attachment.php?aid=5)
8. Leave unused features disabled
Developer mode and API access are unnecessary for a basic manual hosting setup. Do not expose API keys in screenshots. Offline mode affects internet-dependent functions; it is not a normal security setting for an online hosting panel. Close panel stops panel access and should not be used while following setup steps.
Final check
Verify the saved panel URL, a fresh login, accurate time, available disk space and required running services. Record your changes privately. This is a settings review, not a claim that every security or backup feature has been configured.
Change the panel password
Secure aaPanel Free Edition: HTTPS, SSH Keys & Panel Port
Official aaPanel settings reference
1. Open Settings → Global
Use Search settings to find a specific item. The current interface groups network/access, HTTPS, authentication and interface preferences. Other tabs include Service, Alarm and Backup Restore. Older screenshots may group these options differently.
2. Set useful display preferences
Choose the Language you prefer and an Alias that identifies the server. Alias changes the panel title; it does not create a DNS record or rename a website. Theme and hidden-menu preferences affect how you use the panel. Keep essential sections visible while learning.
3. Check time and timezone
Confirm the server clock and selected timezone. Our lab uses UTC, which makes server logs easier to compare. Choose a timezone deliberately and remember it when reading logs or scheduling backups. The Sync control is for server time; changing the display language does not correct a wrong clock.
4. Understand default folders
The lab shows /www/wwwroot as the default site folder and /www/backup as the default backup folder. Each website belongs in its own site subdirectory. These defaults are not an instruction to put every site directly into /www. Changing a default is not a migration of existing website files. Check ownership, disk space and application paths before relocating data.
5. Panel backup is not a full website backup
Our Auto Backup Panel setting is enabled with 30 retained backups. The interface explicitly says its automatic backup does not include website data or MySQL data. Keep separate backups of website files and databases, store a copy off the VPS, and test restoration. A local backup folder will not protect you from losing the entire server. Do not use One-click clear backup while establishing your recovery plan.
6. Review session and access settings
Timeout controls idle-session logout; choose an appropriate duration for your working environment. Changing Panel port, Security Entrance, Domain or Authorized IP can interrupt access. Prepare working SSH/provider recovery access and test a fresh login after each change. Domain binding restricts which hostname can access the panel; wait until its DNS and HTTPS work. A management-IP allowlist requires a stable address.
7. Keep panel HTTPS enabled
Check certificate trust, expiry and renewal instead of assuming an HTTPS switch guarantees a valid certificate. The screenshot below shows the lab certificate status captured for our security walkthrough. A panel certificate does not enable HTTPS for your websites.
8. Leave unused features disabled
Developer mode and API access are unnecessary for a basic manual hosting setup. Do not expose API keys in screenshots. Offline mode affects internet-dependent functions; it is not a normal security setting for an online hosting panel. Close panel stops panel access and should not be used while following setup steps.
Final check
Verify the saved panel URL, a fresh login, accurate time, available disk space and required running services. Record your changes privately. This is a settings review, not a claim that every security or backup feature has been configured.
Change the panel password
Secure aaPanel Free Edition: HTTPS, SSH Keys & Panel Port
Official aaPanel settings reference