This article was originaly posted on Jekayode.com.
WordPress is the simplest, most popular way to create your own website or blog. In fact, WordPress powers over 37% of all the websites on the Internet.
WordPress is a popular target amongst hackers and often has the notion of not being secure. But there are basic things you do to protect your website even without touching code or complicated plugins.
Here are 5 of those DIY steps you can take to protect your WordPress website:
Avoid ‘admin’ username During your WordPress installation, you should never choose “admin” as the username for your main administrator account. If you want to increase your website’s security, always personalize your username.
User strong passwords Always remember to use a strong password, even though it can sometimes be difficult to manage a long list of different passwords, it is absolutely necessary to do so.
Add Two Factor Authentication No matter how secure your password is there is always a risk of someone discovering it. Two-factor authentication involves a two-step process in which you need not only your password to login but a second method such as SMS, phone call or OTP.
Regular updates Keeping your WordPress up to date is a good practice to keeping your website secure. This includes WordPress core, plugins, and themes.
Regular Backups Backups are like the insurance policy in case the worst happens. There are quite a number of awesome plugins ready to backup on the cloud such as Amazon S3, Google Cloud Storage, Google Drive, or Dropbox
There are more technical WordPress security hardening methods that I will be sharing in subsequent posts.
Feel free to reach out to me if you have challenges with your WordPress website. I will be glad to take a look.
Top comments (2)
Just to complete with plugins name, I wrote in November 2019 about this subject: sycured.com/no-unauthorized-access...
Nice write up. The technical part is highly essential for better security. Thanks for sharing.