Performance Glossary
SSH: Where WP-CLI Turns an Hour Into a Command
You have a database full of stale URLs after a migration and no appetite for clicking through phpMyAdmin one table at a time.
The short answer
SSH is an authenticated, encrypted session straight into the server's command line, and its practical value is that WP-CLI, Composer and Git deployments all assume it exists — the jobs that take an hour through a browser take one line here.
It carries more than a shell. SFTP runs inside the same protocol, Git talks over it, and port forwarding gives you a private route to services deliberately kept off the public internet.
By the HostingFast team · Reviewed 12 August 2026
100+
Terms, measured not asserted
2 min
To read one entry
Plain
Commands you can run
24/7
Engineers on shift
Anything you would normally click through the control panel can be typed instead, and once the commands stick, typing wins comfortably. Deployments, log reading, bulk edits and awkward debugging all collapse into single invocations you can put in a script.
Retiring password logins in favour of a key pair makes the door harder to force and quicker to open at the same time — which is an unusual trade in security, and the reason the entire industry administers its fleets this way.
The jobs that justify the access
wp search-replace across a migrated database rewrites every stale URL in one command, serialised data included, with a --dry-run flag that shows you the count before anything changes. The phpMyAdmin equivalent is an hour of find-and-replace and a real chance of corrupting a serialised option.
The same pattern repeats: wp plugin list to audit versions, wp db export before a risky change, composer install to build dependencies on the server rather than uploading a vendor directory. Each one replaces a slow manual process with something repeatable.
Reading logs where they live
tail -f on the error log while you reproduce a fault is the fastest debugging loop available. You see the entry appear as you trigger it, which removes the guesswork of matching a timestamp in a downloaded file to something you did five minutes ago.
Combine it with grep to isolate one plugin's noise, or pipe an access log through awk to count status codes by hour. These are the checks that turn 'the site felt slow yesterday' into a specific window and a specific path.
What a key pair actually proves
Two files are generated together. The public half is installed on the server; the private half never leaves your machine. Logging in becomes proof that you hold that file, so bots grinding through password lists and phishing pages harvesting typed credentials both come away with nothing usable.
Add a passphrase to the private key and load it into an agent for the session. That gives you two factors — something you have and something you know — without typing anything at each connection.
Working safely on shared hosting
Every account on our shared plans is isolated, so a shell session reaches your own files, databases and processes and stops there. That boundary is what makes shell access on shared hosting a reasonable thing to offer rather than a liability.
Rehearse destructive commands on staging. rm with a wildcard, a database drop, a find with -delete: run them against a clone first, read what they report, and only then run the same line on live. The command is identical; the consequence of a typo is not.
Written for people who prefer a terminal
These entries assume you would rather type a command than hunt through a panel, and they give you the command rather than a description of where the button lives.
SSH, Git and Composer come with the developer-focused plans, and every account is isolated so a session reaches your own files and nothing else.
- Commands given, not described
- Dry runs before destructive work
- Key auth explained properly
- Rehearsal on staging assumed
Why HostingFast
Standard on every plan
The command, spelled out
Where a job has a one-line answer, the entry gives you the line rather than a paragraph about the panel.
Dry runs first
The flags that show you what a destructive command would do before it does any of it.
Keys explained mechanically
What each half of the pair is for, and precisely what a password-guessing bot has left to attack.
Logs read live
Tailing an error log while reproducing the fault, so cause and entry appear together instead of hours apart.
Isolation made explicit
What a shell session on our shared plans can reach, so contractor access is a scoped decision.
Linked to what it unlocks
Each entry names the tooling that becomes practical once a shell is available.
Quick Start
From order to online
- 1
Generate the pair and install the public half
Create the key locally, add the public key to your account, and leave the private key exactly where it was created.
- 2
Test in a second session
Open a new connection using the key while the original session stays open. Never close your only working login to test a new one.
- 3
Run the real work with --dry-run first
For anything that writes — search-replace, deletes, imports — read the reported count before removing the flag.
Built In
Loaded onto every plan
- SSH, Git and Composer on the developer-focused plans
- Staging you can clone, break and throw away before anything reaches live
- NVMe on every tier — the entry plan runs the same drives as the top one
- PHP version selectable per site, switched from the control panel in seconds
- Daily backups with a self-service restore you run yourself from the panel
- LiteSpeed compiled into the server, not a caching plugin bolted on afterwards
- DDoS filtering absorbed at the network edge, before it reaches your workers
- 99.9% uptime as the target, monitored around the clock
- A human on support at any hour, including for the awkward questions
- Renewal billed at your signup rate — no year-two step change
Frequently Asked
What people ask us most often
What can I actually do over SSH that the panel cannot?
Run WP-CLI, which is the difference between a one-line search-replace and an hour in phpMyAdmin. Also Composer builds, Git deployments, live log tailing, scripted backups and bulk file operations. The panel handles configuration well; the shell handles work that repeats.
Should I use a passphrase on my SSH key?
Yes, and load it into an agent so you type it once per session rather than per connection. Without one, anyone who copies the private key file has your access. With one, they need the file and the phrase, which is a genuine second factor rather than a nuisance.
Do I get shell access on shared hosting?
On the developer-focused plans, yes — SSH, Git and Composer included. Every account runs isolated, so a shell session reaches your files, your databases and your processes and nothing beyond them. That is what makes WP-CLI and push-to-deploy workflows practical without renting a VPS.
What does support actually cover at three in the morning?
A human reply at any hour, with a scope that includes the practical jobs: DNS records, mailbox setup, a restore, a WordPress site that has stopped answering. Send a hard technical question in before you buy — the reply you get is a fair preview of the standard afterwards.
Keep reading
Git
Version control as a deployment mechanism, with rollback measured in seconds.
VPS (Virtual Private Server)
A KVM slice with guaranteed resources, and the point where shared stops scaling.
How to Secure Your Hosting Account
Keys, two-factor and the settings worth changing on day one.
OpenCart Hosting
One-click OpenCart on storefront-tuned PHP, with free SSL and staging included.
WordPress Hosting
WordPress with LiteSpeed caching, staging and updates handled for you.
Changing hosts? Run through our checklist first.
A straightforward sequence for a switch your visitors never feel: which files move first, how to shift email across without losing a single message, the right moment to repoint DNS, and the two mistakes behind almost all the downtime we get asked to rescue.
One command instead of an afternoon.
SSH, Git and Composer on the developer plans, with isolated accounts and staging to rehearse the destructive commands on.
View OpenCart Hosting plans