You cannot blame others if you can’t secure your website properly. It’s your responsibility to make sure, your site is not vulnerable to cyber-attacks. Let’s see how to make your WordPress site secure.
- RENAME LOGIN URL
Login page for WordPress pages is same. It will be either /wp-admin/ or /wp-login.php. The best way and primary way to secure your website are to change the URL of your Login page to something unique which cannot be guessed easily. For an example, yoursite.com/new_log_page_admin.php
- FREQUENT CHANGE OF PASSWORDS
Make a habit of changing your password now and then. It will reduce the change of being hacked by BF attack. This site will help you to generate good passwords.
- PROTECT WP-ADMIN
Wp-Admin is considered to be the heart of your WordPress site. You can consider giving some complex password to that folder.
- CHANGE ADMIN USERNAME
By default, people tend to use the admin as admin username, which is not recommended. You can change your admin username to something very Unique.
- SET PASSWORDS FOR YOUR DATABASE
“Root” is this your WordPress database password? If so consider yourself lucky, if you are not hacked till now. You should change your password to something new which will difficult to guess containing letters, numbers, and alphanumeric.
- PROTECT AND BACKUP WP-CONFIG.PHP
This file has some critical information about your WordPress installation. It will be difficult for hackers to reach your backend if they can’t access the wp-config.php file. Passwords protect it that too.
- UPDATE WORDPRESS REGULARLY
WordPress often updates their security, and it’s your job to update your website to the latest version, to get all support from WordPress.
- TWO FACTOR AUTHENTICATION
Add TFA(Two Factor Authentication) to your login. It will reduce the possibility of being hacked.
- LOGIN LIMIT ATTEMPTS
Install Login Lockdown plugin and limit the user not to attempt many attempts from a single PC.
- DO REGULAR BACKUPS
Using a plan B is always advisable. If your site got compromised even after applying all security, we will get a quick option to restore our website, if we have a recent backup. You can use some plugins for taking a backup of your website at regular intervals. Your hosting provider may also have the facility to take auto backups of your website.
Everything we have mentioned here is for beginners who just get into WordPress or for those who don’t have much knowledge about security. The more you apply security to your site, safer it will be from hackers.
