WordPress is the most used CMS system in the world. WordPress is a flexible system and is also free to use.
WordPress is basically safe. It does depend on whether certain matters are properly arranged or set up.
Unfortunately, 100% certainty is not possible here either. But it actually works the same as with regular burglars. If the neighbors leave the key in the door, they are generally more likely to receive visits from uninvited guests.
HBelow are a number of important things that should definitely be in place for a WordPress website.
Username Password
Under no circumstances use “admin” as a username. This is the default name of the administrator account in WordPress and the first name attempted in a brute-force password attack. In fact, such an attack involves trying different passwords until the correct password is found.
From the username we automatically come to the second part; the password. This must have at least 8 but preferably 16 characters. Preferably completely random, for example a code like 5GDkjs8HMcZlm3N3. When remembering/saving passwords, always use a program such as Keepass. This ensures that you only have to remember one password.
In the sitemap, the author pages should be disabled if the same login name is used as communicated in comments, blogs, etc.
WordPress installation
The important things that need to be in place here are the database name, the username, the password and the table prefix.
Use a unique and unguessable combination for all four.
You can fill this in at wp-config.php before installation or adjust it here.
Templates & plugins
All templates en plugins that we install are purchased through reliable parties. However, there are often websites on the internet that offer these paid templates and plugins for free. These often have extra or modified code that allows access through a backdoor or allows the website to be abused in another way. This includes sending spam or copied results with advertising in Google.
Update regularly
In addition, it is important to regularly update all templates, plugins and WordPress itself. One update (especially with templates and plugins) is more important than the other.
Often an update only consists of a new language or function or the resolution of a bug, but it can also be a repair/fix for a security hole.
Hosting
The WordPress website may be well secured, but if the hosting of the website is not properly and seriously arranged, entering is an easy feat.
For this reason, we only provide the security of websites on servers for which we manage the security ourselves.
We take care of the hosting of your WordPress website in combination with MooijWerkt! and TransIP. Both are companies with years of experience with reliable hosting and security.
Also ensure that a backup is made daily. This ensures that you can restore the website to its previous state if your website is hacked.
Security plugin
Wordfence has a free and a paid premium version
An important security tool is a good security plugin. We offer a premium license of one of the best security plugins as standard with our security packages.
This controls, among other things, the blocking of IPs and the scanning of the website.
With a security package we monitor the website and take action if necessary. You no longer have to worry about security.
In Summary
Securing a WordPress website is a serious job. The above is only part of what is possible and what we do. Milcraft can take complete security off your hands.
You pay a fixed low price per month and we take full care of the security of your website.
Also take a look at our maintenance- and hostingpackages.
Would you rather increase your security yourself? Please keep in mind that for a number of things (such as adjusting the database data in the wp-config,php) it matters whether you do this with a new installation or running website. This can cause major problems.
Always make a backup of your website before making any changes.
If you have any questions about the above or would like more information about our security packages? Please feel free to contact us via contact form. of info@milcraft.nl.
