GoDaddy will implement new information-security programs to settle charges that the technology platform failed to secure its website-hosting services and protect its customers from attacks, the Federal Trade Commission said.

The Federal Trade Commission (FTC) will require web hosting giant GoDaddy to implement basic security protections, including HTTPS APIs and mandatory multi-factor authentication, to settle charges that it failed to secure its hosting services against attacks since 2018.

The website hosting company was accused of failing to implement robust enough security measures from at least 2018.

In a complaint filed Wednesday, the FTC alleged that since 2018, GoDaddy has failed to implement reasonable and appropriate security measures to protect and monitor its website-hosting environments for security threats and misled customers about the extent of its data security protections on its website hosting services.

Despite its size and complexity, FTC complained that the company had failed multiple security standards that needed to be fixed immediately.

Internet registrar and web host GoDaddy agreed to two decades worth of third-party assessments over its cybersecurity practices in a settlement with the U.S. FTC.