It’s obviously important to keep your installation of WordPress as secure as possible.
All ANA Themes, by default, take a couple of simple steps to protect your site:
- The version of WordPress that you’re running is removed from the header
- Your ANA-assigned username is always unique and never “admin”
But this is just the tip of the iceberg. There’s a multitude of ways to make your site more secure:
- Use a strong password and change it frequently. Avoid dictionary words and common phrases. Do not share your password with anyone. Do use a combination of uppercase letters, lowercase letters, numbers, and special characters.
- Protect your wp-config.php file. This file stores the database information needed to connect WordPress, such as your username, password, etc.
- Use .htaccess to protect it by inserting the following code into your .htaccess file:
<Files wp-config.php>
Order Allow,Deny
Deny from all
</Files>
- Move the wp-config.php file to the directory immediately above your WordPress installation.
- Use security keys! WordPress explains this better than I can, so please go here, scroll about halfway down the page and have a look-see.
- Keep your WordPress installation up to date. Always back up your site before updating!
- Make use of security Plugins. Here are some I highly recommend:
Are you thinking, who would want to hack my site? There’s always the possibility you could be the target of a random attack. Remember, there are lots of people out there with way too much time on their hands. Some are just troublemakers while others have more nefarious intentions. It doesn’t hurt to take some simple steps to protect your site, which after all is an investment in yourself!
The tips mentioned here, while very effective, are only a sampling of things you can do to keep your WordPress site safe. To find out more, just Google “secure wordpress” and see what you come up with!
