If your hosting provider runs Plesk, Sucuri has an important article on it.  I don’t know anything about Plesk, but plain text passwords would be my first reason not to use it.