Secure Wordpress - Am I Scaring You Yet?

It was Monday morning and I was on a call with a dozen others who are my peers. Each of us helps the small business owner with their businesses in one way or the other. It was at the end of the call and we were each sharing our websites and going over how to make little improvements here and there. Time was running out and there was just enough time for one more website review, I volunteered. As my site was coming up for all to see suddenly the screen turned a maroon red with an outline of a security officer with his hand stretched out and the words of"don't precede malware threat." I was too horrified to remember precisely what it said although there was more. I was worried about my site on being destroyed plus humiliated the people on the call had seen me vulnerable, I had spent hours.



Finally, installing the fix wordpress malware protection Scan plugin alert you to anything that you might have missed, and will check all this for you. Additionally, it will tell you that a user named"admin" exists. That is the administrative user name. You find directions for changing that name, if you wish and can follow a link. Personally, I believe that a password is protection that is good, and there have been no successful attacks on the sites that I run because I followed those steps.

Safeguard your login credentials - this hyperlink Do not keep your login credentials where a hacker could locate them. Store them offsite, and even offline. Roboform is very good for protecting them, also. Food for thought!

There is a section of config-sample.php that is headed"Authentication Unique Keys." There are. There is a hyperlink within that part of code. You want to enter that link in your browser, copy the contents which you get back, and then replace the keys you have with the unique, pseudo-random keys offered by the site. This makes it harder for attackers to automatically generate a"logged-in" cookie for your site.

It is really sexy to fan the flames of fear. That is what journalists and bloggers and politicians and public figures do. It's great for readership and it brings money into the war chests. Balderdash.

However, I recommend that you install the Login LockDown plugin instead of any.htaccess controls. Login requests will stop from being permitted after three unsuccessful login attempts from a certain IP address for one hour. If you do that, you may get into your admin panel while and yet you still have great protection against hackers.