Home » Technology and Apps » 20 TIPS FOR A SECURE WORDPRESS WEBSITE



More than 70% of WordPress sites and blogs are vulnerable to attack due to their security flaws. Once you have started with your WordPress site the next major step should be its security. Not taking security seriously is an open invitation to hackers. If you are wondering how to secure WordPress website, here are 20 simple tips that would help you prevent malicious attacks to your site.

Use Latest WordPress Version Legacy versions of WordPress are most vulnerable to attacks as they often have known security flaws. You need to constantly update to the latest version of the CMS.

Update Themes & Plugins Along with WordPress you also need to update your themes and plugins to the latest version available. The latest versions come with security patches for the known vulnerabilities and secure your WordPress site.

Clean Your Site You should clean your site like you would clean your kitchen and remove stale food items. Delete plugins and themes that you no longer use as the legacy versions can be exploited easily.

Keep Workstations Sanitized  You don’t need a hacker to harm your site, viruses and malwares in your workstation are enough. Keep your workstation sanitized to prevent such kinds of security breaches.

Secure Hosting Provider Choose a reliable hosting service provider or move your existing site to one that assures security features. They adopt state-of-the-art measures that thwart most attacks keeping your site/blog secure.

Use .htaccess It is one of the best ways to secure your site where you would be able to block IPs and you can learn how to do this by following the links at the bottom of the article.

SSL Encryption It encrypts all the data that your blog or site would send and prevents it from being intercepted midway via your router or other network. SSL data even if intercepted is hard to decrypt.

Don’t Use Admin as Username  This is the default setup in WordPress and most attackers would target it. Using a strong admin name secure you against petty cyber criminals. Also use a strong password that has alphabets, numerics and special characters.

User Accounts  Monitor the permission levels in all your user accounts and make sure you offer access to users who really need it. Check for the passwords in all the accounts and remove any unused account created during development.

Two Step Authentication There are several plugins such as Clockwork SMS, Clef, Duo Two-Factor Authentication  that allow you two step authentication mostly using your mobile as an additional security step. It is like doubling up the guards outside the gate!

Deny Multiple Login Attempts Hackers often use the ‘brute-force’ technique using random usernames and passwords. Track down the IPs used in such attacks and block them using the User Locker plugin.

Hide Login Error Messages Login error messages often offer much more information to a seasoned hacker to study the vulnerabilities of your site. Hide it using the following code

add_filter(‘login_errors’,create_function(‘$a’, “return null;”));

Hide Directories Keeping all your directories visible and accessible to the hackers is a big threat. Placing the following code in the .htaccess file would do it for you.

# Prevent folder browsing

Options All -Indexes

Database Security WordPress uses MySQL database which is automatically created on your web hosting server. The database password must be strong or else it would act as a weak link in your site security.

Use SFTP In place of using a FTP while uploading your files you can use a Secure FTP or SFTP. Here all your files would be encrypted and this discourages any attempts of hacking.

Use An Antivirus  Installing an antivirus keeps your site secured against bots, viruses and malwares that are floating all around in the Internet.

Be Careful While Cleaning Up If you are cleaning up your site or database, you need to be careful about the vulnerable information. So don’t leave behind files such as phpinfo.php, readme.html and SQL database files.

Isolate Websites While it is a common practice to use the same hosting account for multiple sites, you should try and avoid this as much as possible as one site’s vulnerability affects the others.

Backup Site While all these measures should secure your site, you need to be prepared for a day when the security is compromised. Backup your site using a robust plugin as this will allow you to restore the site in case of an attack.

Stay Vigilant Staying vigilant is an important part of your WordPress security. Keep track of the latest security threats and implement the remedial measures in your site.

Looking to Hire Indian Developers?

Contact Us To Save Upto 50% Of Development Cost and 2x Faster Delivery

Are you ready to turn your idea into reality? Contact Us Now

More From ValueCoders Blogs:-

Flaw in popular WordPress plug-in Jetpack puts over a million websites at risk

Flaw in popular WordPress plug-in Jetpack puts over a million websites at risk

Owners of WordPress-based websites should update the Jetpack plug-in as soon as possible because of a serious flaw that could expose their users to attacks. Jetpack […] - Read More

Bulletproof Your Joomla Website

Bulletproof Your Joomla Website

According to a recent post by Royal Pingdom that compiles some intriguing Internet stats, there are roughly 634M websites in the world and around 51M are taking birth […] - Read More

Security Tips For Your WordPress Site [Infographic]

Security Tips For Your WordPress Site [Infographic]

WordPress is one of the most popular and powerful CMS ifor business websites and blogs. Keeping your WordPress site secure from malware is important for every business. […] - Read More

Wordpress vs Drupal vs Joomla

WordPress Vs Drupal Vs Joomla

Drupal, Joomla and WordPress are the three major Content Management Systems (CMS) preferred by most businesses. All have their own respective […] - Read More

10 SEO Tips for WordPress

If you are planning to launch your site or blog in WordPress, Search Engine Optimization would be one of the important things in your mind. WordPress and SEO go hand in […] - Read More

Top 6 Typography Tips for your WordPress Website Design

Top 6 Typography Tips for your WordPress Website Design

With all the headlines, text in body copy and Italian to Bold blocks of text, we all would agree to the fact that typography is an integral part of design, moreover it […] - Read More

Experience The Latest WordPress Version on iOS

Experience The Latest WordPress Version on iOS

Creating ripples in the market, latest WordPress version of iOS has landed with a bang that anybody could have ever imagined. Yes, you read it right! The most awaited […] - Read More

PHP Security: Tips To Fortify Your Website’s Security

PHP Security: Tips To Fortify Your Website’s Security

PHP or Hypertext Processor is a server-side scripting language, which is very popular among web developers, thanks to highly flexible syntax with flawlessly work in […] - Read More

50 Wordpress Tips and Tricks

Since its release in 2003, WordPress has been the most admired website development platform. Its highly flexible and customizing tools allow the users to develop a […] - Read More

wordpress google font

How to Enhance WordPress Theme: 5 Tips to Customize Fonts

Beauty lies in the eyes of beholder is true but the eyes of beholder do want some freshness and novelty to see. When it is about WordPress you know you have readers […] - Read More

PHP or NodeJS: which is more secure?

From the beginning, PHP has always been there to take it to the next level. However, with the advancements in technologies, PHP apps are becoming a primary target to […] - Read More

Infographic – Ways to Speed up Your Wordpress Site

Infographic – Ways to Speed up Your Wordpress Site

When it comes to generating web traffic, speed matters a lot. For every extra second it takes for your page to load, exponentially more of your visitors […] - Read More

WordPress Creating Milestone with Updated iOS App Version 3.2

WordPress Creating Milestone with Updated iOS App Version 3.2

WordPress for iOS added another feather in its cap with the launch of a major update for its mobile application. The new version is nothing short of excellent as the […] - Read More

Plugins – Transforming Your Site into a Blogger’s Paradise

Plugins – Transforming Your Site into a Blogger’s Paradise

There’s every possibility that whoever reading this article is well informed that: WordPress is the most popular blogging platform, A blog’s core […] - Read More

Featured Post

30 Simple and New App Ideas for Startups (AI, ML, Blockchain, AR/VR)

In 2019, the demand for app ideas is increasing. More and more businesses are building apps which are lightweight, tech-savvy, fast and serves the purpose. In 2017–18, there were around $197 billion of mobile app downloads, which will jump to a stunning mark of $352 billion by 2021. The era of complex and heavy apps[...] - Read More