1 / 22

Tips for a secure wordpress website

More than 70% of WordPress sites and blogs are vulnerable to attack due to their security flaws. Once you have started with your WordPress site the next major step should be its security.

Valuecoders
Download Presentation

Tips for a secure wordpress website

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Tips For A Secure Wordpress Website

  2. Introduction • More than 70% of WordPress sites and blogs are vulnerable to attack due to their security flaws. Once you have started with your WordPress site the next major step should be its security. • Not taking security seriously is an open invitation to hackers. If you are wondering how to secure WordPress website, here are 20 simple tips that would help you prevent malicious attacks to your site.

  3. Use The Latest Wordpress Version • The Legacy versions of WordPress are most vulnerable to attacks as they often have known security flaws. • You need to constantly update to the latest version of the CMS.

  4. Clean Your Site • You should clean your site like you would clean your kitchen and remove stale food items. • Delete plugins and themes that you no longer use as the legacy versions can be exploited easily.

  5. Keep Workstations Sanitised • You don’t need a hacker to harm your site, viruses and malwares in your workstation are enough. • Keep your workstation sanitized to prevent such kinds of security breaches.

  6. Secure Hosting Provider • Choose a reliable hosting service provider or move your existing site to one that assures security features. • They adopt state-of-the-art measures that thwart most attacks keeping your site/blog secure.

  7. Use .htaccess • It is one of the best ways to secure your site where you would be able to block IPs. • It is a a very simple process and you can do it using htaccess.

  8. SSL Encryption • It encrypts all the data that your blog or site would send and prevent it from being intercepted midway via your router or other network. • SSL data even if intercepted is hard to decrypt.

  9. Don’t Use Admin as Username • This is the default setup in WordPress and most attackers would target it. Using a strong admin name secure you against petty cyber criminals. • Also use a strong password that has alphabets, numerics and special characters.

  10. User Accounts • Monitor the permission levels in all your user accounts and make sure you offer access to users who really need it. • Check for the passwords in all the accounts and remove any unused account created during development.

  11. Two Step Authentication • There are several plugins such as Clockwork SMS, Clef, Duo Two-Factor Authentication that allow you two step authentication mostly using your mobile as an additional security step. • It is like doubling up the guards outside the gate!

  12. Deny Multiple Login Attempts • Hackers often use the ‘brute-force’ technique using random usernames and passwords. • Track down the IPs used in such attacks and block them using the User Locker plugin.

  13. Hide Login Error Messages • Login error messages often offer much more information to a seasoned hacker to study the vulnerabilities of your site. Hide it using the following code: • add_filter(‘login_errors’,create_function(‘$a’, “return null;”));

  14. Hide Directories • Keeping all your directories visible and accessible to the hackers is a big threat. Placing the following code in the .htaccess file would do it for you. • # Prevent folder browsing • Options All-Indexes

  15. Database Security • WordPress uses MySQL database which is automatically created on your web hosting server. • The database password must be strong or else it would act as a weak link in your site security.

  16. Use SFTP • In place of using a FTP while uploading your files you can use a Secure FTP or SFTP. • Here all your files would be encrypted and this discourages any attempts of hacking.

  17. Use an Anti-Virus • Installing an antivirus keeps your site secured against bots, viruses and malwares that are floating all around in the Internet.

  18. Be Careful While Cleaning Up • If you are cleaning up your site or database, you need to be careful about the vulnerable information. • So don’t leave behind files such as phpinfo.php, readme.html and SQL database files.

  19. Isolate Websites • While it is a common practice to use the same hosting account for multiple sites, you should try and avoid this as much as possible as one site’s vulnerability affects the others.

  20. Backup Site • While all these measures should secure your site, you need to be prepared for a day when the security is compromised. • Backup your site using a robust plugin as this will allow you to restore the site in case of an attack.

  21. Hiring WordPress Developers To keep your WordPress site secure, you must hire experts developers to manage your website. ValueCoders provides remote, dedicated developers on monthly rolling contracts. The teams provide expert solutions to all kinds of requirements related to WordPress and a host of other technologies.

  22. www.valuecoders.com Get in Touch sales@valuecoders.com www.facebook.com/valuecoders www.twitter.com/valuecoders www.linkedin.com/company/valuecoders IND: +91 859 535 5175 1000 - 2130 HRS IST

More Related