WordPress Security: 16 Steps to Secure & Protect Your Site
Learn how to protect your WordPress website from hackers with these 16 security tips and find out what to do if your WP site is hacked.
How To Secure Your WordPress & Elementor Website: Fast, Easy, & Free!
NEW ELEMENTOR DESIGN PROGRAM
The Official Design with Elementor Program (pre-enrollment open for only 10 days!) https://lytboxacademy.com/design-with…
BLACK FRIDAY DEALS 40% OFF LYTBOX COURSES
Build & Sell WordPress Maintenance Plans https://lytboxacademy.com/maintenance…
The Complete Guide to Web Project Management https://lytboxacademy.com/the-complet…
BECOME A LYTBOX PRO MEMBER
The Lytbox Pro Academy https://lytboxacademy.com/the-academy/
THE HOSTING I USE
CloudWays https://www.cloudways.com/en/?id=485185
Siteground https://www.siteground.com/index.htm?…
THE TOOLS I USE
Elementor Pro https://be.elementor.com/visit/?bta=4…
Crocoblock https://crocoblock.com/?ref=2021 &camp…
PERSONAL ELEMENTOR COACHING
1-On-1 Elementor Power Hour Training https://lytboxacademy.com/elementor-t…
Thank you for supporting my channel – Jeffrey @ Lytbox
=====
⏰ Timestamps:
Adding Wordfence: 1:40
Adding Hide Login: 6:02
Adding Activity Monitor: 7:28
Extra Security (SSL & Backups): 11:50
Links to Free Security Plugins (non-affiliate):
Wordfence: https://wordpress.org/plugins/wordfence/
WPS Hide Login: https://wordpress.org/plugins/wps-hide-login/
WP Activity Log: https://wordpress.org/plugins/wp-security-audit-log/
=====
Hackers and hacking bots are constantly crawling the internet and targeting WordPress websites most of all. This is why it is vital to add security to protect your and your client’s websites. In this video, I will show your 3 simple ways to fully protect your website. These are free tools and the same tools I use to protect all of our and our client’s websites.
How To Secure Your WordPress & Elementor Website: Fast, Easy, & Free!
How to secure a WordPress website.
#securewordpress #securewordpresswebsite #wordpresssecurity elementor website security
How To Secure Your WordPress Websites with iThemes Security – 2021 Tutorial
Learn how to secure your WordPress website by using a FREE plugin called iThemes Security. In fact, I use it on all of my and my client websites!
Start here
Do you want to support my channel? Leave a like or buy Divi / Elementor Pro with 10% discount via the link below. That will help me enormously to create these free videos for you and keep going!
⇒ Software that I recommend:
✅ Divi 10% discount ⇒ https://wp.discount/divi-discount/
✅ Elementor Pro ⇒ https://wp.discount/elementor-pro-discount/
✅ SiteGround 70% discount ⇒ https://wp.discount/siteground-discount/
✅ WP Rocket 10% discount ⇒ https://wp.discount/wp-rocket-discount/
I want you to succeed with your website, so lets get started.
⏱️Timestamps⏱️
0:00 Intro
0:25 Installing iThemes
0:50 Setting up the plugin
14:53 Advanced settings
19:35 Important things to do
20:16 Setting up two factor authentication
✅For tips and tricks on getting the most out of Divi and WordPress, don’t forget to subscribe: https://wpressdoctor.com/sub
Transscript
Hey guys what’s up? You don’t want to get hacked, so let’s get started by securing your WordPress website. And in this video we will be securing my latest website which you can see in this tutorial which shows you how to exactly create this awesome website. So be sure to check that out. So first we go to login to the dashboard, and then you go to ‘Plugins’ – ‘Add new’. Because the only plugin we will need is this one: “iThemes Security”, just press Enter. And this is a completely free plugin. They have a pro version but for now the free version is perfect. press ‘Install Now’ and then we press ‘Activate’. Now our plugin has been activated. So the first thing we’re going to do is we’re going to press this ‘settings’ button right there. Do you have a webshop? You have a Network website with a forum for example? Do you have a nonprofit website with donations? Do you have a blog with a lot of interactions with comments? Do you have a portfolio just with a lot of pictures for example, or do you have a brochure website: a simple website to promote your business. Well choose the one that fits you. Why? Well, because there are different features going to be enabled if you choose a different one. Because for eCommerce we need different security settings than for a brochure. We are now going to use the brochure website: simple website to promote your business. We are setting the website up for ourself. And yes, I want to enforce a password policy. Why is this? Well, the entire security of your website could be compromised with just a weak password. So guys, this is really important. Use a strong password. Press ‘Next’. The next step is enabling two factor authentication. This is powerful. If you enable this combined with your strong password, then your website is pretty much unhackable through the front gate. So if you enable this – let’s push on this button- then you need a app on your mobile phone or a text message or anything else that will prevent users from logging in without using a second authentication factor. This is great. So we’re going to enable this and we’re going to press ‘Next’. You want to keep this enabled. This is just when people try to login they have guessed your username right and they trying to login by guessing your password. Well, it’s pretty hard if you don’t have your mobile phone with authentication, it’s pretty much impossible. But if they’re trying to do so they will be locked out when they try five or six times. Also network brute force protection is all IP addresses will be scanned throughout a database so they know exactly who to block and who not. So press ‘Next’ on this one. And if you want a security check pro just when I said, enable this one because this is a powerful feature. Press ‘Next’. Now this is useful if you have different authors on your website. If you’re the only one, just press ‘Default’. If you are the only one using your website, you can press ‘Skip user groups’. If you’re not the only one and you have multiple people work on your website. You can actually configure this per user. So let’s say you’re the administrator and you have a couple of editors or authors and you don’t want the editors and the authors to change the iThemes Security settings. So you can disable the global settings in a security dashboard for that group of people. It is very very useful. We don’t have different user groups on this website. So you can press ‘Skip user groups’. If you don’t have any other people who are going to your website, press ‘Recommended configure site’. This is the place where you can add your IP address to WordPress security so you will be never blocked out of your website. This is very useful. Just press ‘Add my current IP…
Read the rest of the transcript at https://www.wpressdoctor.com/uncategorized/how-to-secure-your-wordpress-websites-with-ithemes-security-2021-tutorial/
#WordPress #Security #iThemes
15 Steps to Make Your WordPress Site More Secure Against Hackers
Keeping your WordPress Security high is key for your website success and, as a site owner, there are several things that you can do yourself to help ensure you are securing your WordPress site as much as possible.
In this video, you will learn how to make your WordPress site more secure and protect it from hackers by applying the following 15 steps:
00:00 Intro
00:13 #1 Invest in a Reliable Hosting Solution
Choose a provider that is specialised in WordPress, adopts cutting-edge technologies and is 100% committed to security.
Check how at SiteGround we secure your website to the most! → https://www.siteground.com/technology#security-solution
01:49 #2 Update your WordPress, Plugins and Themes
Having them outdated can be an open door for hackers. At SiteGround you can get automated updates of your WordPress version.
02:41 #3 Use Latest PHP Version
It is important that you run your site on the latest version of PHP to make sure it is as secure as possible. At SiteGround you can get the latest PHP version released automatically thanks to our managed PHP.
This is how it works: https://www.siteground.com/kb/enable-managed-php-service/
03:52 #4 Use an SSL Certificate
To encrypt your data. You can get free SSL certificates with SiteGround to secure all your sites.
This is how you can easily install it with SiteGround → https://www.youtube.com/watch?v=7xbnI2a3_g4
04:48 #5 Install a WordPress Security Plugin
Our SiteGround Security plugin is specially designed to help you secure your WordPress site at all levels in just a few clicks.
Download it for free → https://wordpress.org/plugins/sg-security/
05:50 #6 Implement Two-Factor Authentication
As an additional step in the login process to secure your WordPress site. You can easily enable it with the SiteGround Security Plugin.
Watch an extensive demo → https://youtu.be/qBqruXvuxjY?list=PLTbAWJM0XBG-m3XwOK6E9oAOla3OQxPRt &t=2574
06:53 #7 Disable the “admin” Username
You can easily prevent having accounts named “admin” in your WordPress site using the SiteGround Security plugin for major WordPress Security.
07:51 #8 Limit Login Attempts
If a hacker is trying different passwords with a valid login and you limit the failures, that account is locked for a specific time. You can easily set the number of login attempts of your site with the SiteGround Security plugin.
09:16 #9 Limit Login Access
You can limit the IP addresses that can access the admin side of your WordPress website, so only IP addresses that you rely on can access your site. Again, you can easily configure this in the Login Security section of the SiteGround Security plugin.
10:46 #10 Lock and Protect System Folders
You can prevent backdoor exploits by locking and protecting your system folders to ensure that no unauthorised or malicious scripts can be executed in your system folders.
You can turn on this feature with SiteGround Security plugin.
11:59 #11 Disable XML-RPC
XML-RPC is not used anymore because all of the functionality that it provided is nowadays handled by the built-in REST API, so it is better to disable it. You can do it in a matter of a click using the SiteGround Security plugin.
If you want to know more about the WP REST API, download these free ebooks:
https://www.siteground.com/wordpress-rest-api-guide
12:57 #12 DDoS Protection
DDoS or DoS attacks can stop your web server from serving pages by sending massive requests to your server. To avoid this, at SiteGround we have developed strong DDoS mitigation systems.
Check them here → https://www.siteground.com/technology#security-solution
14:53 #13 Implement Proper User Roles
Applying the “Principle of the least privilege”, in which you just grant the absolute needed access to your users roles, can prevent potential security issues.
Check out more about it on our blog → https://www.siteground.com/blog/principle-least-privilege-wordpress/
15:50 #14 Make Regular Backups
You should be doing regular backups of your website. By hosting your WordPress site with SiteGround, it will be backed up once a day on a different geographical location, you will be able to keep those copies for the last 30 days, easily restore them and even create on demand backups in higher hosting plans.
17:40 #15 Change Your WordPress Login URL
Bad actors depend on your login page being at /wp-login.php. You can easily edit it by using the SiteGround Security plugin.
18:35 Wrap-up
Have you already taken some of these steps? Which ones did you find more useful? Don’t hesitate to leave us a comment!
️ MORE ABOUT THE SITEGROUND SECURITY PLUGIN
https://www.siteground.com/blog/sg-security/
CHECK SITEGROUND WORDPRESS HOSTING PLANS
https://stgrnd.co/wphosting
MORE USEFUL CONTENT
Website Security Series:
https://www.youtube.com/watch?v=qBqruXvuxjY &list=PLTbAWJM0XBG-m3XwOK6E9oAOla3OQxPRt
WordPress Video Tutorials Series: https://www.youtube.com/playlist?list=PLTbAWJM0XBG8ukT3s5NdW010ZclJYvbEq
How To Secure Your WordPress Website From Hackers (4 Easy Steps)
Links Mentioned in the Video
Blog Post on Astra Website https://wpastra.com/wordpress-security-guide/
WPS Hide Login Plugin https://wordpress.org/plugins/wps-hide-login/
WordFence for WordPress https://wordpress.org/plugins/wordfence/
Cloudflare Website https://www.cloudflare.com/
✅✅ Here are some of our recommended products ✅✅
Astra – The Most Popular WordPress Theme https://bsf.io/astra/
Schema Pro – Add Schema To Your Website https://bsf.io/schemapro/
Ultimate Addons for Elementor https://bsf.io/ultimateelementor/
Ultimate Addons for Beaver Builder https://bsf.io/ultimatebeaver/
Convert Pro – Convert Visitors to Subscribers https://bsf.io/convertpro/
WP Portfolio – Showcase Your Work https://bsf.io/wpportfolio/
——————————————————————-
Table of Contents
00:00 — Introduction
00:54 — Change Your Login URL
03:07 — Keep Plugins and Themes Updated
04:33 — Install Security Plugin with Firewall
10:21 — Install a Web Application Firewall
——————————————————————-
Video Description
Millions of websites are hacked every year, and more than a million attempts are made to hack WordPress websites. WordPress’s popularity acts as a double-edged sword here. The question is, how do you prevent your website from getting hacked? The answer, watch this video 😉
In this video, we’re covering the 4 basic steps you can take to secure your WordPress website. We’ll teach you how to change your website’s login URL, take essential steps to ensure that your website is not vulnerable, set up a firewall on your website, set up 2FA on your website, and set up a web application firewall. It may sound complex, but all of these steps are easy to perform, and they are free to do as well.
Just to clarify, no website is 100% secure — even the biggest companies in the world get hacked. But, by following the steps we’ve outlined in this video, you’ll ensure that the most common security vulnerabilities on your website are taken care of, which will go a long way in securing your website.
——————————————————————-
Find out more about us on our website: https://brainstormforce.com/
Subscribe to us for more WordPress tutorials and guides!
https://www.youtube.com/user/TheBrainstormForce?sub_confirmation=1
Follow us on our Facebook Page : https://www.facebook.com/BrainstormForce/
Follow us on Twitter : https://twitter.com/WeBrainstorm/
We’re on GitHub Too : https://github.com/brainstormforce/