GoDaddy will implement new information-security programs to settle charges that the technology platform failed to secure its website-hosting services and protect its customers from attacks, the Federal Trade Commission said.

The Federal Trade Commission (FTC) will require web hosting giant GoDaddy to implement basic security protections, including HTTPS APIs and mandatory multi-factor authentication, to settle charges that it failed to secure its hosting services against attacks since 2018.

GoDaddy fails to adequately protect hosted customer websites and engages in misleading privacy advertising, FTC says. It demands robust IT security.

In a complaint filed Wednesday, the FTC alleged that since 2018, GoDaddy has failed to implement reasonable and appropriate security measures to protect and monitor its website-hosting environments for security threats and misled customers about the extent of its data security protections on its website hosting services.

A proposed settlement order from the FTC will require GoDaddy to strengthen its security practices following multiple data breaches at the web hosting giant

Despite its size and complexity, FTC complained that the company had failed multiple security standards that needed to be fixed immediately.