Friday, February 15, 2013

Pin It

Small pieces of advices to a Secure WordPress Website.


By on 2/15/2013 08:00:00 AM

Here are ten WordPress security tips that anyone can try. There are some websites that will give you security advice that includes changing the code of your website. This is all well and good, until you update your WordPress, or install a plugin, and a bunch of errors comes up. Or until the time comes when you forget what changes you have made and have to restart again with a new installation. If you do decide to make changes to your code, then remember to leave notes for yourself in the code that you will understand but that your hackers will not understand.

1 - Change the default username to something customized

Image : socialtrafficlab.com

One of the most common security threats comes through people keeping their default username. You need to change it to a username of your choosing. The default usernames are the first ones that hackers try when they are looking to gain access to your site. Do not make a hackers life any easier than it already is.


2 - Buy from domain a safe and secure shared host


As a blogger, you are probably going to buy your web space from a shared host. If that is the case, you are going to be better off looking for one that takes good care of its server. You need one that scans the server for malware and viruses, and one that keeps the server up to date.

3 - Install your WordPress updates as soon as they arrive


The longer it takes you to install the update then the longer you will be exposed to threats. For all you know, the update may be a result of hundreds of a hacker finding a flaw in the WordPress system. Hundreds of websites could have already been hacked, and the longer you wait to update then the higher the chances that the hackers will find you.

4 - Increase the strength of your WordPress password


Doing this will make it harder for hackers, bots and brute force attacks to gain access to your WordPress website/blog. Make your WordPress password at least eight characters, and add a few numbers. If you want a very strong password then you need to be more creative with your passwords.

5 - Install a “Login Limit” program or addition


This is to help stop brute force attacks. A brute force attack involves having a computer try every password possible until gaining access to your systems. On average it takes a fast computer around 80 days to figure out your password, which is why you should change your passwords every 72 days. Obviously if your password is one of the famous few such as “000000”, or “password” or “monkey” then it will take them 80 seconds. A login limit stops these brute force attacks in the same way your bankcard is suspended if you enter the wrong pin three times.

6 - Install a security plugin to scan for malware


This tip is mentioned briefly in point number ten, but for the record, you need a malware shield and scanner on both your site and your computer. You should also make a point of buying shared hosting services from a company that scans the server routinely for malware.

7 - Add a plugin that hides your WordPress version


If a hacker knows what version of WordPress you are using then he or she will be able to hack your website more easily. Every version of WordPress needs its own hacking tools and techniques to get into. If a hacker knows what version you are using then he or she will know which tools and techniques to use. It will take a hacker longer to hack your WordPress if he or she has to guess what version you are using.

8 - Change your password every 72 days


You may forget to do this so you should consider installing a plugin that reminds you to change your password routinely. Ideally, you should set the password change for the same day that you change your email account password, and any other passwords that mean a lot to you. If you do them all on the same day then it is harder to forget to do it.

9 - Have routine workstation security audits


Attacks on your WordPress blog are going to come from all angle, exterior and interior, which means you need to keep your security tight. A security audit should examine everything, from how secure your computer and Internet connection is, to how secure your website and server is. Every time you check an avenue of attack, you block another malcontent messing with your website or computer.

10 - Install some security plugins


It would be unethical to recommend all of the specific plugins you should try, because it is difficult of vouch for how safe or secure they are. You need a plugin that will secure your entire admin panel; try a plugin that will encrypt your panel with SSL.

You should have a plugin that will encrypt all of the login credentials except for the username. You should change as many of the default WordPress elements as possible, especially the default username, and there are plugins that will help you to do it. There are plugins that will create a custom URL for you to login (try these when your WordPress site becomes popular).
You should have a plugin that will block any bad queries. They can do things such as look for any suspiciously long request strings. Finally, you need a good anti-malware and anti-virus shield and scanner.

Author’s bio:
My name is Sonia Jackson. I represent the Australian web-site The Essay Bag. and Guest blogger of Reviewat8.in We’ll help you to solve all problems with writing different essays and research papers according to the rules of the universities and colleges in Australia.

About Stanly Stephen

Stanly Stephen is a Technical Expert age 18 and founder of Review at 8, one of the most widely read how-to- blogs in the world and also the founder of Gang Giz Social Network.read more »

0 comments: