five tips on how to protect your wordpress website
because security is so important nowadays and you don't want to lose all that hard work that you put into your website just because somebody hacks your website hello internet people my name is robert and help website owners to run and grow their online businesses with digital strategy tips website tutorials and tool reviews so
first tip is simple to implement but so many forget to set this up it's automatic backups preferably somewhere external like dropbox or google drive because if your servers get hacked it's good that the backup files are not on the same server personally use a plugin called updraft plus for a tutorial how to install and this doesn't directly help with security but if all goes wrong you can always just restore your website from a backup and this is something that your web hosting might ask if they don't know how to fix , it they just ask for a backup and if you don't have it you're screwed
the second tip is to keep your wordpress and plugins updated basically this ensures that you don't have any known vulnerabilities that hackers could exploit wordpress community is quick to pick up on these kind of security updates and they happen very often so curry reported in 2019 that over 56 of all cms applications were out of date when hacks happened so there is a lot of people that don't do this you can set your wordpress to update plugins automatically and here's how to do it so this is my test website and here to update the wordpress itself you click on update and you have here link enable automatic updates for all new versions of wordpress then you need also the same for your theme and if you go to appearance themes and click on the theme that is active now here you have a link in my case it says disable auto updates but in your case it will probably say indeed auto then let's close this down and then let's go to plugins and install plugins same thing for plugins you have here individually you can enable them auto updates per plugin or you instead you can just select all of them and here in bulk actions you can select enable auto updates then if you click on update apply it'll just enable the auto update
third tip is to install a security plugin that also comes with a firewall these plugins enable you to do integrity monitoring malware scanning two-factor authentication and so on you can use i theme security or wordfence security as your plugin they are both available in wordpress plugin library on the other hand a firewall will block malicious traffic before it even reaches your website oh yeah and make sure you test your page speed after installing one of these tools some users have reported that their page load times have increased significantly so you might need to try a few different ones for more about item security
fourth tip is to prevent brute force attacks against your site a plugin called limit admin logins limits the login attempts to your wordpress admin dashboard this will make it much harder to try to brute force your password it's basically done with a computer and entering different options until they get it right but this plugin puts you on timeout after three failed login attempts and then he actually also reports that in a log so you can see if somebody has tried to brute force your website now one thing though your security plugin might already have this feature so maybe you won't need to install it separately but just double check that you have one
the fifth tip is not so much about wordpress but just in general you should use a password management software like lastpass to store most of your passwords just there this way you can create a unique and long password for different websites but you won't actually need to remember them this plugin just basically always enters the passwords for you just make sure your password to the tool itself is strong enough and hard to guess and enable the two-factor authentication in lastpass that means after you've entered uh your login details it will also ask you to authenticate yourself via an app or your phone the two-factor authentication happens like once a month so don't worry you won't need to verify it every time you enter a website so it's super easy to use and i really recommend and having longer passwords is probably more important than using a lot of different characters in your password this gif here it just illustrates it
Comments
Post a Comment