Introduction to WordPress Security
9 likes6,101 views
The document provides essential tips and advice on WordPress security, emphasizing the importance of protecting websites from random hacks, often executed by bots. Key recommendations include keeping WordPress core, themes, and plugins updated, implementing a backup strategy, using strong passwords, and utilizing security plugins. Additional resources and guidance for securing WordPress sites are also offered, targeting both novice and experienced users.
Introduction to WordPress Security
- 1. Introduction to WordPress Security By Nile Flores @blondishnet http://blondish.net
- 2. Objective ❏ Answer why security is important ❏ Basic WordPress security tips ❏ Some related general security tips that work hand-in-hand with WordPress security ❏ WordPress security plugin suggestions ❏ Resources to learn more about security
- 7. Why is WordPress security important? Your website may be your livelihood. Like getting insurance and putting an alarm on your home or car, implementing security techniques or “hardening” your site protects your investment.
- 8. Why you? It’s not about you. It’s not even about how much traffic you get. The hacks are usually with bots and done randomly.
- 9. Ways In ❏ Your Internet Service Provider/ includes Wifi ❏ Your Email ❏ Your Web Hosting Account ❏ Web Scripts/ Software (Yes, this includes WordPress)
- 10. Why do people hack? ❏ Make money ❏ Curiosity
- 11. So, how does WordPress get compromised? ❏ Brute Force through your login ❏ Theme files ❏ Plugin files ❏ WordPress core files ❏ FTP/ Cpanel/ Plesk ❏ Bot attack/ DDoS
- 12. Security is an ongoing process. Technology is always advancing, so you’re never going to be 100% secure.
- 13. HOWEVER… Remember that “insurance” part I mentioned?
- 14. #1 Piece of WordPress Security Advice ALWAYS keep your WordPress core, themes, and plugins up-to-date!
- 15. #2 Most Important Thing ALWAYS back up your website. Oh, and don’t just save the backup in one place. Store them in a couple places.
- 16. More WordPress Security Tips
- 17. Your Username Your username should never be “admin”
- 18. Your Password ❏ You should never use “password” for your password ❏ Use sites like LastPass.com to save passwords ❏ Use different passwords for different websites
- 19. Passwords (continued…) Try using a plugin that contains two-factor authentication. Clef Two-Factor Authentication is a cool one to use - http://bit.ly/1GK2OqB
- 20. WordPress Database Prefix Change your database prefix. (By default it’s wp_ )
- 21. Security Advice for Multiple Users ❏ Set their roles ❏ Don’t allow them full access to your web hosting account ❏ Remove users who are temporary tenants ❏ Don’t send their password from the WordPress admin panel
- 22. Themes ❏ Keep your theme up-to-date ❏ Consider child theming - http://bit.ly/1cjzSdt ❏ Vett your theme ❏ Remove themes that you’re not using
- 23. Plugins ❏ Keep your plugin up-to-date ❏ Vett your plugins before using ❏ Remove plugins that you’re not using
- 24. WordPress Security Plugins ❏ Brute Protect (included in Jetpack) - http: //bruteprotect.com/ ❏ iThemes Security - http://bit.ly/1cNkPpN ❏ Wordfence - http://bit.ly/1ikXHyS ❏ Sucuri Security - http://bit.ly/1He85sW
- 25. More WordPress Security Resources ❏ Codex (Hardening WordPress) - http://bit. ly/19fxUmu ❏ How to Secure Your WordPress Blog - http: //bit.ly/1dzTESE
- 26. Not code savvy? If you don’t know code and were hacked, don’t worry… there’s always someone out there that offers Hack cleanups, and also Security audit services.
- 27. Any Questions Nile Flores http://blondish.net Subscribe to my weekly newsletter! Twitter: @blondishnet Facebook: http://facebook.com/NileFlores SlideShare: http://slideshare.net/blondishnet All About WordPress group on Facebook