Securing your WordPresssite in 5 easy pieces

Kevin Koehler @kev097

I am not asecurity expert.

And so can you!

PIECE 1

Good password hygiene

http://www.imdb.com/title/tt0065724/

1. Good password hygiene

Very long, very randomPh’nglui mglw’nafh Cthulhu R’lyeh wgah’nagl fhtagn1

XKCD.com/936

Password managers, yay!

Don’t share

Two-Step Authentication

With people or services

1Password, LastPass

Google Authenticator, Duo

PIECE 2

UPDATE!

2. UPDATE!

“Minor” releases = majorly important4.2.4

Auto-update is your friend

PIECE 3

Choose solid partners

3. Choose solid partners

Responsive, active in the community

Frequent updates

WordPress.org directory 👍

Beware dirt cheap hostsToo good to be true?

(themes, plugins, hosts)

Popular

PIECE 4-5

Scan & backup

4-5. Scan & backup

Jetpack - Protect

Sucuri

VaultPress

BackUpWordPress

·

Thanks!

Tweet @kev097 Email kev@automattic.com

Extra credit

Hardening WordPress http://codex.wordpress.org/Hardening_WordPress

Security white paper https://wordpress.org/about/security/