{"id":9612,"date":"2016-04-07T14:01:34","date_gmt":"2016-04-07T18:01:34","guid":{"rendered":"http:\/\/www.hostdime.com\/blog\/?p=9612"},"modified":"2020-04-28T19:08:54","modified_gmt":"2020-04-28T23:08:54","slug":"how-to-secure-wordpress-site","status":"publish","type":"post","link":"https:\/\/www.hostdime.com\/blog\/how-to-secure-wordpress-site\/","title":{"rendered":"10 Easy Ways to Enhance Your WordPress Website’s Security"},"content":{"rendered":"

\"secure<\/p>\n

WordPress, the most popular content management system used by millions of websites worldwide, is a favorite target of exploit by hackers because it is so widely used. While WordPress itself is very secure, the many themes and plugins linking into WordPress may not be. Here are 10 easy steps you can take to further secure your WordPress site.<\/p>\n

 
\nInstall Newest Version of WordPress:<\/strong> First of all, always make sure you have the latest version of WordPress installed for your account. Every new version of WordPress should have software installed that optimizes your site faster than before. Make sure you test your site and it\u2019s speed after a new WordPress update to make sure your site is functioning the best it can be.<\/p>\n

Update All Plugins:<\/strong> You\u2019re not done updating. It\u2019s important to check your plugins with every new WordPress update. Make sure the plug-ins you need are updated and working properly. <\/p>\n

Delete All Unnecessary Plugins:<\/strong> Plug-ins you are not using should not just be turned off, but deleted completely from your directory. Separate your plugins into two categories, ones you need and ones you don\u2019t. Try to substitute a non-local plugin with a WordPress plugin wherever possible. <\/p>\n

Always keep an eye out for the latest fixes and releases for your plugins. Monitor the web sites of the developers whose plugins you are running; add their sites to your RSS feed. Quickly install these improvements because hackers will try to exploit recently outdated scripts with confirmed security flaws.<\/p>\n

Backup Your Site Frequently:<\/strong> Backups are packaged files of your account that contain everything that make up your website, including emails, databases, and redirects\/forwarders. Save and back up your data as often as your schedule allows because you may be able to restore your latest backup if a hack occurs. We discussed backups more in detail here<\/a>. <\/p>\n

Limit Logins:<\/strong> By default, WordPress lets users try as many passwords as many times as they want to get into their account. A brute force attack is when a hacker tries usernames and passwords continuously until gaining access to the account, usually with the help of a bot. Download a plugin like WP Limit Login Attempts<\/a> to lock out the user after a set amount of tries or by proving a Captcha.<\/p>\n

Two-step Authentication:<\/strong> In April 2013, WordPress.com allowed users to log in with two-step authentication for better security. Logging in with a password is single-step authentication; two-step is where you use two factors to prove your identity. So, once you enter a password, you must use your phone or another device to further prove authentication. Keep in mind that two-step authentication can also prevent legitimate logins. Say you forget your phone at home and have the two-step authentication enabled, then you won\u2019t be able to access your account. Google Authenticator<\/a> is one of the most popular authentication plugins. <\/p>\n

Avoid Generic Usernames & Passwords:<\/strong> Speaking of gaining entry, you will make a hacker’s job much easier if your username is something like \u201cadmin\u201d, \u201cadminstrator\u201d, or some combination of your first and last name. Try to make your username as unique as your password. WordPress Security Team says that \u201cthe weakest link in the security of anything you do online is your password.\u201d If you can memorize the password, it\u2019s probably not secure enough. Fill your passwords up with some non-alphanumeric characters. Try a password generator and change your password every few months.<\/p>\n

Set File and Folder Permissions Correctly:<\/strong> These permissions specify who can read, write, modify, and access file and folders. This is done by adding up the following values for the user, the file group, and for everyone else. <\/p>\n