{"id":7815,"date":"2021-04-19T11:25:52","date_gmt":"2021-04-19T11:25:52","guid":{"rendered":"https:\/\/www.realjossy.com\/?p=7815"},"modified":"2023-10-23T11:31:06","modified_gmt":"2023-10-23T11:31:06","slug":"wordpress-security","status":"publish","type":"post","link":"https:\/\/realjossy.com\/blog\/wordpress-security\/","title":{"rendered":"Easy Guide on How to Secure Your WordPress Website"},"content":{"rendered":"\n
\"wordpress<\/figure>\n\n\n\n

WordPress Security is very important when it comes to having a WordPress website. Here are eight common-sense steps on how to secure your WordPress website<\/a> including some WordPress security plugins which every WordPress website owner can use to make their WordPress site much more secure.<\/p>\n\n\n\n

WordPress Security Tips<\/h2>\n\n\n\n

Here are few things to do to secure your WordPress Website. And I will list the best WordPress security plugin that you can also install to secure your WordPress website the more.<\/p>\n\n\n\n

WordPress Security Tip 1<\/strong>. Don\u2019t use the default administrator user account<\/h3>\n\n\n\n

Every hacker knows this account is named \u201cadministrator<\/a>\u201d so changing this means one less thing that they know about your site. This will greatly reduce the likelihood of a brute force attac<\/a>k is successful.<\/p>\n\n\n\n

Create a new user with administrator privileges; it\u2019s this new user you will then use to administer your WordPress website.<\/p>\n\n\n\n

WordPress Security Tip 2<\/strong>. Use a Secure Password<\/h3>\n\n\n\n

This should go without saying. Modern password crackers use software that can attempt billions of passwords per second and need no technical expertise to use them. Using a free password manager<\/a> such as LastPass<\/a> you can generate extremely complex passwords and have them presented just when you need them.<\/p>\n\n\n\n

Alternatively, you can use a passphrase<\/a> instead of a password. This simply means remembering a string of words and adding extra characters to make it more secure, for example, nonsen$e PeanUt 1ndicaTors<\/strong> would be quite easy to remember but quite difficult to crack (at least at the time of writing).<\/p>\n\n\n\n

A variation of this technique is to take letters from a memorable phrase. For example, a phrase like \u201cmy important website is now much more secure\u201d could become the password \u201cMiWiNmM$” by taking the first letter of each word. <\/p>\n\n\n\n

You should also force all users to have a minimum level of password strength with a plugin like Force Strong Passwords.<\/a><\/p>\n\n\n\n

Finally, two-factor authentication<\/a> massively increases site security. If you use online banking then you\u2019re familiar with the one-time password (OTP) sent via SMS or another method. <\/p>\n\n\n\n

This means a hacker needs to know your password AND steal your phone to gain access. Use a plugin such as Two Factor Authentication<\/a>. (Incidentally, looking at the active install statistics for two-factor authentication plugins will tell you how few people are using this secure method of website access.)<\/p>\n\n\n\n

WordPress Security Tip 3<\/strong>. Limit Login Attempts<\/h3>\n\n\n\n

Brute Force Attacks rely on the fact that WordPress by default allows as many login attempts as you like so passwords can be tried again and again until one works. <\/p>\n\n\n\n

This can be stopped by limiting the number of login attempts and then blocking or causing a delay before allowing the next attempt. Accomplish this with a simple plugin<\/a> or use a general security plugin like Wordfence<\/a> which has this feature. <\/p>\n\n\n\n

A side benefit of this method is that you can identify repeated attempts from the same IP address and perhaps consider blocking that address, although this method of blocking is not very effective as IP addresses can change frequently.<\/p>\n\n\n\n

WordPress Security Tip 4.<\/strong> Change The Login Page<\/h3>\n\n\n\n

As with the default admin account, every hacker also knows the place to log in to your website is .<\/p>\n\n\n\n

Changing this address will mean the attacker cannot find your login page and will greatly reduce the incidence of brute force attacks that even make it to your door. If they can\u2019t find it, they can\u2019t exploit it.<\/p>\n\n\n\n

Use a general WordPress security plugin that lets you do this, like the one from iThemes Security<\/a>.<\/p>\n\n\n\n

WordPress Security Tip 5<\/strong>. Control User Access<\/h3>\n\n\n\n

If you have other users who log on to your site then be very careful about how much access you give them. Many site owners automatically make everyone an admin so that they can do whatever they need to without disturbing the administrator. This is a dangerous policy as you cannot control how these users access the website. <\/p>\n\n\n\n

Also, be very careful about who you give your password to and how you do it. Instead of sending passwords via email, use something like BurnNote or PrivNote to securely pass credentials to developers and others who need access.<\/p>\n\n\n\n

Remember that if you have multiple users on your system you are also responsible for what those users do on your system.<\/p>\n\n\n\n

WordPress Security Tip 6.<\/strong> Choose a Reliable Web Hosting Provider<\/h3>\n\n\n\n

Whether you\u2019re using shared hosting, a VPS, or a dedicated server you need to make sure the company has a great reputation for making customers\u2019 security a priority.<\/p>\n\n\n\n