How to Secure Your WordPress Website

1. How to Secure Your WordPress Website RainaStudio

2. How to Secure Your WordPress Website

3. Let’s Secure Your WordPress Website

4. Tell me a little about Wordfence Security As well as, also has a malware scanner that scans all your WordPress core files, plugins, themes, and, upload folders for changes and suspicious code. It can also helps you clean a hacked WordPress site. However, the basic Wordfence plugin is free, it also comes with a premium version that gives you access to more advanced features like firewall rules updated in real time, country blocking, scheduled scanning, and more. So, now let’s move on to ensure your WordPress Website using Wordfence Security plugin.

5. Installing Wordfence Security Now, search for it from the Search Bar and the first result is the Wordfence Security (as you can see above). Then, click the ‘Install’ button and in a moment it’ll be installed, then click the ‘Activate’ button. Once, it activated, a pop-up window will open instantly. Simply close the window and you can see the ‘Wordfence’ button on your dashboard. So, it’s time to setup Wordfence on your WordPress website.

6. Setting Up Wordfence Security Where, you can see an overview of the plugin’s security settings on your website. As well as, security notifications and stats such as recent IP blocking, total attacks blocked, failed login attempts, etc.

7. Scanning Your Website So, let’s start a scan. Once you click the ‘Start a WordPress Scan’ button, it’ll start scanning to look for changes in file sizes in the official WordPress core and plugin files. Even, it’ll also look inside the files to check for suspicious code, malicious URLs, back-doors, and any known patterns of infections. Wordfence does the scan as efficiently as possible, however the time it takes to complete a scan will depend on how much data you have, and the server resources available. You’ll be able to see the progress of the scan in the yellow boxes on the scan page during the scanning process.

8. Setting Up Firewall

9. Setting Up Firewall On the other hand, extended firewall allows Wordfence to run before WordPress core, themes, and plugins. Which ensure much better protection against more advanced security threats.

10. Setting Up Firewall To setup Extended firewall protection click the big blue button ‘Optimize the Wordfence Firewall’, then it’ll detect your server configuration by running a test in the background. But, if you wonder to see that your server configuration is different from what Wordfence has selected. Then, you can select a different one (there is an option available for that). Now, click on the continue button. Then, Wordfence will ask you to download your current .htaccess file as a backup. So, download .htaccess and after downloading the backup file click on the continue button (Now, it will update your Website’s .htaccess file which will allow it to run before WordPress).

11. Setting Up Firewall Then, you’ll be redirected to the main firewall page where you will now see the protection level as ‘Extended protection’. I’m sure, you’ll also notice a ‘Learning Mode’ button. After the first install of Wordfence Security plugin, it attempts to learn how you and your users interact with the website to make sure that it doesn’t block legitimate visitors. In most case, after a week it will automatically switch to ‘Enabled and Protecting’ mode.

12. Blocking IPs On this page, you can block individual IPs and even full networks! As well as, you can also block suspicious IPs manually.

13. Real-Time Activity Monitoring Like other powerful security options, Wordfence also show you a very useful log of all requests made to your website. You can view the log on the ‘Live Trafic (Site Activity in Real-Time)’ section.

14. Essential Security Tools Such as, you can run password audit to ensure that all users on your website are using strong passwords. As well as, you can also run whois-lookup for suspicious IP addresses and view diagnostics information, which helps debug issues with the plugin or your WordPress site. With Premium version, Wordfence allows users setup two-factor login to strengthen login security on their websites.

15. Other Security Options However, the feature’s configuration is well here already. But, you can selectively turn those features on and off. Like, you can also enable or disable limiting login security, email notifications, live traffic view, scans, and other advanced settings. So, that’s it, finally it’s done!