How to remove/change the X-Powered-By header for all websites hosted in Plesk




  • Avatar
    Daniel Santer (Edited )

    "Removing the X-Powered-By header"

    This method does not work for me. I still recieve the X-Powered-By header...


    Eather it's a painful work if you have a lot of domains. You should implement a toggle to hide this header same with php x-powered-by header, for security reasons, or just keep them away...

  • Avatar
    Anzhelika Khapaknysh

    @Daniel Thanks for the feedback!
    I've checked instructions on the test server and it works for me. Please provide more details. Have you reconfigured domains as per step 7?

  • Avatar
    Unknown User

    If i have my custom templates, e.g. /usr/local/psa/admin/conf/templates/default/server.php

    Will I have problems with future Plesk updates?

    Or could it be that I will not benefit from further improvements?


  • Avatar
    Ivan Postnikov

    Hello @Tobias,

    Having a custom template is not an obstacle for future updates.

    In case you will have any issue, feel free to contact Plesk Technical Support.

  • Avatar
    Josef Glatz (Edited )

    Thanks for that article! Works as described in Onyx 17.8.11 on Ubuntu


    Beside that: It would be very very nice if Plesk can include a toggle in the website config GUI to disable such headers also when nginx works as proxy in front of apache

  • Avatar
    Artyom Baranov

    @Josef Glatz,

    Hello! Thank you for the feedback.

    You may share your idea on a special resource:

Please sign in to leave a comment.

Have more questions? Submit a request