{"id":56453,"date":"2024-08-28T12:58:17","date_gmt":"2024-08-28T12:58:17","guid":{"rendered":"https:\/\/www.mindmingles.com\/?p=56453"},"modified":"2024-08-28T12:58:17","modified_gmt":"2024-08-28T12:58:17","slug":"how-to-secure-a-wordpress-website","status":"publish","type":"post","link":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/","title":{"rendered":"How To Secure A WordPress Website 2024: 20 Best Security Tips"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">A research conducted by W3Techs suggests that WordPress holds 62.6% of the market share at present, being the most preferred CMS used by 44% of site builders. However, if its security isn\u2019t avant-garde, then no matter how embellished your site is, it is going to stand in deep waters. Security concerns are the key to maintaining a healthy and safe website which makes it quintessential to learn <\/span><span style=\"font-weight: 400;\">how to secure a wordpress website<\/span><span style=\"font-weight: 400;\">. In this blog, we\u2019ll discuss the WordPress security recommendations for contouring the vulnerabilities\u00a0<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_Are_The_Benefits_Of_Securing_WordPress_Site\"><\/span><b>What Are The Benefits Of Securing WordPress Site?\u00a0<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Protects site from data breaches.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Builds trust among customers\/audience<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Improves SERP rankings<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Serves as defence against unwanted legal actions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Enhances website maintenance<\/span><\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Common_Threats_To_Website_Security\"><\/span><b>Common Threats To Website Security<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Weak Passwords<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Brute Force Attacks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cross-Site Scripting (XSS)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQL Injections<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cross Site Request Forgery (CSRF)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Phishing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Outdated Software\/Versions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DDoS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Spam<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Malware<\/span><\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"WordPress_Security_Checklist\"><\/span><b>WordPress Security Checklist\u00a0<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">In this section, we\u2019ll discuss typical security measures that don\u2019t require technical know-how:<\/span><b><\/b><\/p>\n<h3><b>1. Update your website regularly\u00a0<\/b><b><\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Updating your WordPress website regularly is a basic yet great idea if you\u2019re bothered about unwanted security concerns.. Minor updates are usually done automatically by the platform itself, major updates releases however need site owners\u2019 attention. In addition, plugins and themes also require timely upgrades for security enhancement.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Retain a backup of your existing WordPress site beforehand so that you won\u2019t lose any data in case the plugin or theme updates aren\u2019t compatible with the new WordPress version or don\u2019t go your way.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Follow these steps to update your WordPress website:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Log in<\/b><span style=\"font-weight: 400;\"> to your website admin panel.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Locate the <\/span><b>Dashboard<\/b><span style=\"font-weight: 400;\"> option in the left-side menu and then click on <\/span><b>Updates<\/b><span style=\"font-weight: 400;\">, check whether the version of WordPress you\u2019re using is outdated or not.\u00a0<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-57206\" src=\"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-To-Secure-A-Wordpress-Website7-1.png\" alt=\"How to secure a wordpress website\" width=\"513\" height=\"687\" \/><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Update it for the current available version. Scroll down a little to the plugins section and update them, and just below that you\u2019ll find the theme section.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Alternatively, follow the below-stated steps to update the themes and plugins integrated into your WordPress site:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access the WordPress admin panel with your credentials.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">On seeing the <\/span><b>Menu<\/b><span style=\"font-weight: 400;\"> to the left, select <\/span><b>Dashboard<\/b><span style=\"font-weight: 400;\"> and then go to<\/span><b> Updates.\u00a0<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Go to the <\/span><b>Themes and Plugins<\/b><span style=\"font-weight: 400;\"> section and see for the updates if any.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">You can also leverage the automated updates feature with these steps:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">From <\/span><b>Dashboard<\/b><span style=\"font-weight: 400;\"> navigate to <\/span><b>Websites<\/b><span style=\"font-weight: 400;\"> then click on <\/span><b>WordPress, <\/b><span style=\"font-weight: 400;\">then <\/span><b>Security.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Scroll down a little, and click <\/span><b>Automatic Updates Configuration.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Enable Automatic Updates.<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">If you\u2019re a WordPress Business user or have access to any of its Cloud hosting plans, simply go to <\/span><b>Show Advanced Settings<\/b><span style=\"font-weight: 400;\"> and select <\/span><b>Yes, Enable All Updates<\/b><span style=\"font-weight: 400;\"> option for core updates, themes as well as plugin updates. This will allow automatic update installs and make it easier to manage this setting.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Regular updates with improved security patches will keep your WordPress site healthy.\u00a0<\/span><b><\/b><\/p>\n<h3><b>2. Setup safelist and blocklist<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Building a safelist &#8211; a list of all the trustworthy domains or IP addresses, and a blocklist- a list of malicious domains\/IPs to restrict them from accessing your website, is an excellent way to secure your WordPress website from falling into the trap of hackers.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This can be done through plugins or WAF, for instance \u2013 you can use Wordfence or Sucuri to block certain IP addresses. Follow these simple steps to do this:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">First things first- <\/span><b>ensure to keep a backup<\/b><span style=\"font-weight: 400;\"> of your .htaccess file or WordPress site for restoring it because the procure we\u2019re about to discuss can be a little tricky.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Log in<\/b><span style=\"font-weight: 400;\"> to wp-admin dashboard.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Go to the <\/span><b>Plugins &gt; Add New<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Search for the File Manager Plugin, and install it.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Activate the plugin and go back to the WordPress Dashboard. Hover over to the <\/span><b>Plugins &gt; Htaccess Editor.\u00a0<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Or else, you can do this through cpanel:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Keep the backup of your WordPress site intact in any case.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Log in<\/b><span style=\"font-weight: 400;\"> to your hosting account\u2019s control panel and go to the <\/span><b>File Manager.\u00a0<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">On the left-hand side menu, search and click on the <\/span><b>public_html folder.<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Then access the <\/span><b>.htaccess file.<\/b><span style=\"font-weight: 400;\"> Now insert a line before # BEGIN WordPress in the file. And with this, you\u2019re all set to add your desired code and configuration<\/span><\/li>\n<\/ul>\n<p><b>NOTE:<\/b><span style=\"font-weight: 400;\"> In case, you\u2019re unable to find the .htaccess file as stated in the last step, open the \u201cpublic_html\u201d folder &gt; Settings &gt; Preferences &gt; check the box next to Show Hidden Files.\u00a0<\/span><b><\/b><\/p>\n<h3><b>3. Remove unused plugins and themes\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Any inactive or outdated theme or plugin can be prone to fall prey to hackers. That\u2019s why you must relinquish keeping them on your website. In addition to this, unused themes\/plugins that aren\u2019t serving any purpose must also be deleted.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To disavow outdated themes and plugins, follow these easy steps:<\/span><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Open the <\/span><b>WordPress Dashboard.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Navigate to <\/span><b>Plugins \u2192 Installed Plugins.<\/b><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-57322\" src=\"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-To-Secure-A-WordPress-Website-33-1.png\" alt=\"WordPress Security Checklist 2024\" width=\"738\" height=\"528\" \/><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li><span style=\"font-weight: 400;\">In order to activate the delete button you first need to deactivate the plugin, so click on <\/span><b>Deactivate.\u00a0<\/b><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-56460 aligncenter\" src=\"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website3-1.png\" alt=\"WordPress Security Checklist\" width=\"766\" height=\"394\" \/><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">You\u2019ll see the list of all installed plugins. Click <\/span><b>Delete<\/b><span style=\"font-weight: 400;\"> under the plugin\u2019s name, which is not updated and thus vulnerable to cyberattacks.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">However, if you are willing to <\/span><span style=\"font-weight: 400;\">delete an unused theme<\/span><span style=\"font-weight: 400;\">:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">On your <\/span><b>WordPress admin dashboard,<\/b><span style=\"font-weight: 400;\"> click on <\/span><b>Appearance &gt; Themes.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Click on the theme that you don\u2019t need anymore.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A pop-up window will appear on your screen, showing the theme details. Click the<\/span><b> Delete<\/b><span style=\"font-weight: 400;\"> button on the bottom-right corner.<\/span><\/li>\n<\/ul>\n<h3><b>4. Use a unique WP admin login name<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">With the shift to technological advancements, password-based protections have become an inevitable part. Without them, hackers can provide an unimaginable level of harm to online files. That\u2019s why we suggest using strong credentials for your wp-admin login panel. While doing so, you must remember not to use usernames that are prone to brute force attacks such as\u2013 \u201cadmin\u201d or \u201cadministrator,\u201d as they are easy to guess.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In case you\u2019ve already made this blunder, then follow the below-stated steps and create a new WP Administrator account:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">On your <\/span><b>WordPress Dashboard<\/b><span style=\"font-weight: 400;\">, find and click on<\/span><b> Users,<\/b><span style=\"font-weight: 400;\"> then <\/span><b>Add New<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Create the account as an Administrator. Provide a strong password with a combination of:<\/span><\/li>\n<\/ol>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">uppercase and lowercase letters<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">numbers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Symbols.<\/span><\/li>\n<\/ul>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Then click on <\/span><b>Add New User.\u00a0<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Furthermore, <\/span><b>enabling auto log-out<\/b><span style=\"font-weight: 400;\"> is another crucial aspect that saves your site from falling into the hands of the predator in case you forget to log out. In addition to this, <\/span><b>fettering the login attempts to a certain number <\/b><span style=\"font-weight: 400;\">can also help secure your WordPress site against brute-force attack. What\u2019s more is that you can enable two-factor authentication for your site\u2019s login panel, read further to discover how that works.\u00a0<\/span><\/p>\n<h3><b>5. Enable 2FA<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Apart from securing your WordPress admin panel with unique and strong login credentials, you must attain 2FA (two-factor authentication) for the same. Whenever a hacker or outsider tries to log into your WordPress site, you\u2019ll receive a notification for the same. This will hamper the actions of unauthorized access initiated with an extra layer of security protection to the conventional password method.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Wordfence, Google Authenticator, Duo, and JetPack are some of the highly trusted plugins that come with the 2FA plugin. Here are the steps everyone willing to integrate a two-factor authentication on a wordpress site must know:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensure you\u2019ve saved a backup of your website just in case anything goes wrong\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Log in<\/b><span style=\"font-weight: 400;\"> to wp-admin dashboard.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Go to the <\/span><b>Plugins &gt; Add New.<\/b><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-56465 aligncenter\" src=\"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website4-1.png\" alt=\"Best WordPress Security Practices\" width=\"658\" height=\"321\" \/><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Install and activate the plugin<\/b><span style=\"font-weight: 400;\"> of your choice. A configuration wizard will launch the plugin.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">On the screen, hit the option of <\/span><b>Let\u2019s Get Started.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Now pick any of the given methods (Using an app OR Send code on email OR both) showing for enforcing dual authentication.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Proceed by clicking on <\/span><b>Continue Setup.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Now select whom you want to enforce this dual authentication<\/span><b> (all users OR certain roles OR do not enforce any users), and click on<\/b> <b>Continue Setup.\u00a0<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Next, you can enforce this authentication method real quick or allow a grace period for the users.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">You now need to select what consequences (unable to access their dashboard or block) the users will bear in case they don\u2019t activate dual authentication.\u00a0\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lastly, select <\/span><b>All Done.\u00a0<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Now proceed to configure the dual authentication for your user account, for this, select<\/span><b> Configure 2FA Now.<\/b><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-56464 aligncenter\" src=\"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website5-1.png\" alt=\"Best WordPress Security Practices\" width=\"648\" height=\"435\" \/><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Select whether you want to receive the code via email or an authenticator app on your mobile device like a phone.\u00a0\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Download the WordPress 2FA authenticator app<\/b><span style=\"font-weight: 400;\"> of your choice on your mobile phone and scan the QR code and enter the one-time code received on your mobile in your WordPress site.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Well, it\u2019s time to check whether this works or not for simply logging out of your WordPress account. Log in with your username and password. After dual authentication is active, you\u2019ll receive a one-time code for your website that you need to enter in your WordPress site.\u00a0<\/span><\/p>\n<h3><b>6. Disable file editing permissions\u00a0<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">File Editing permissions must be managed meticulously to avoid breach of authorized access. This will help you control the access of editing the database, themes, plugins, etc. on your website so that no one can alter them without your consent. To do so, you can add this code:<\/span><\/p>\n<div class=\"highlight-code\">\n<p>\/\/ Disallow file edits<b>(\u2018DISALLOW_FILE_EDIT\u2019, true);<\/b><\/p>\n<\/div>\n<p><span style=\"font-weight: 400;\">at the end of the file <\/span><b>wp-config.php:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You can also use a plugin to do the same. In fact, WordPress comes with a built-in theme file editor that can be easily accessed from your active theme, simply go to Appearance &gt; Theme File Editor. Similarly, you can manage plugin files editing permissions as well.\u00a0<\/span><\/p>\n<h3><b>7. Change your WordPress Login URL<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">For one thing, unauthorized access to wp-login.php or wp-admin are the easiest URLs to hack on a WP site. That&#8217;s why it is strongly recommended by cybersecurity experts to change this url. While this is the\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Keep the backup of your site before proceeding.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To your .htaccess file in WordPress root directory, add this code:<\/span><\/li>\n<\/ul>\n<div class=\"highlight-code\"><span style=\"font-weight: 400;\">RewriteRule ^mylogin$ https:\/\/%{SERVER_NAME}\/wp-login.php?key=123&amp;redirect_to=https:\/\/%{SERVER_NAME}\/wp-admin [L]<\/span><\/div>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Now swap the \u201cmylogin\u201d with a new and unique login URL and 123 with a random string.\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Or else, use the <\/span><span style=\"font-weight: 400;\">WPS Hide Login plugin<\/span><span style=\"font-weight: 400;\"> for a more smooth, clean and effortless procedure. It lets users set distinct and unrepeated login slug for enhanced protection with a few clicks.\u00a0<\/span><\/p>\n<h3><b>8. Create regular backups and run security tests<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">One of the most basic yet effective techniques for anyone searching for <\/span><span style=\"font-weight: 400;\">how to secure a WordPress website<\/span><span style=\"font-weight: 400;\"> is keeping regular backups of the site files, content, media, settings, features, etc. It is essential to note that whilst taking backup ensure you save the files to a remote location rather than your web hosting. That\u2019ll allow you to have more control over the files. The most important benefit of backups lies in swift access to data in case any tampering is initiated by a hacker.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Similarly, security scans also enable site owners to guard their websites from any unknown potential cyberthreat. Any malware or malicious practice such as XSS, database injections, backdoors, etc. can be making its way toward adulterating your site\u2019s functionality. Thanks to the best wordpress security scanning tools that have made life much easier as they detect potential security threats to a website.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">There are several plugins that can protect your WordPress site from such loopholes. Doing this task manually can be a bit tedious, especially if one doesn\u2019t have the required knowledge and familiarity with WordPress. Now that you\u2019ve discovered <\/span><span style=\"font-weight: 400;\">how to secure a wordpress website<\/span><span style=\"font-weight: 400;\"> with plugins, learn about some trusted and relevant ones:\u00a0<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>PLUGINS FOR WORDPRESS BACKUPS<\/b><\/td>\n<td><b>PLUGINS FOR SECURITY SCANS<\/b><\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Backup Migration<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Security Optimizer<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">UpdraftPlus<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Security &amp; Malware Plugin<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Duplicator<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Wordfence<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">WP Database Backup<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">All-in-one WP Security Plugin<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">WP Overnight<\/span><\/li>\n<\/ul>\n<\/td>\n<td>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Solid Security<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3><b>9. Get An SSL Certificate<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">An added layer of Security Socket Protocol\u2013 that protects the data of users visiting your site and can boost your credibility enormously- is a must to safeguard your WordPress website. This is important to safeguard the flow of traffic to your site; in addition, elevates the trust factor among users. Google has already made it crystal clear to users to avoid opening a site without the HTTPS protocol in their link. This creates an instant surge in bounce rate if your site is devoid of SSL.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">So invest in the <\/span><a href=\"https:\/\/www.mindmingles.com\/blog\/how-much-does-it-cost-to-build-a-website\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">right type of SSL certificate<\/span><\/a><span style=\"font-weight: 400;\">, depending on the requirements of your company and WordPress website.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Protecting the data transmission between your site\u2019s and users end is crucial to attain trust and maintain a strong grip over any unwanted disruption or data breach. Ecommerce sites are especially at the risk of attracting unwanted attention from the attackers who keep a watch on practices to conduct fraudulent activities to garner sensitive information. They should definitely invest in SSL and other best wordpress security practices.<\/span><\/p>\n<h3><b>10. Add Captcha<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Captcha isn\u2019t something alienated if you regularly visit a couple of sites. This added layer of security with the Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA) is the biggest way to safeguard your wordpress site from unwanted spam comments, automated attacks, DDoS, and many other cyber security issues.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">There are various plugins that offer such a secure environment to your WordPress site including reCaptcha by BestWebSoft, Advanced nocaptcha, and Google recaptcha. The procedure to add them is similar:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Log into your WordPress dashboard.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Go to Plugins, then click on Add New and search for the reCaptcha plugin &gt; install and activate the plugin.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">That\u2019s it and you\u2019ve successfully added reCaptcha to your WordPress admin panel.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Upon activation, visit the Google reCAPTCHA registration page ensuring that you\u2019re logged into your GMail account.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fill out the details on the new page and select the version that you want to use, then click on Submit.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Furthermore yield the secret keys which must be added to your site. This requires a little know-how to do it yourself and keep the keys from anyone, or else you\u2019ll need a website developer for assistance.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Adding captcha plugins will help block spam practices and succeed at creating a diligent automated protective web environment.\u00a0<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_To_Secure_A_WordPress_Website_Best_Practices_WordPress_Security\"><\/span><b>How To Secure A WordPress Website<\/b><b>: Best Practices WordPress Security\u00a0<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Here are some advanced moves that can help you cease the efforts of hackers and avert them from corrupting your WP website:<\/span><b><\/b><\/p>\n<h3><b>1. Use .htaccess to disable php file execution and protocol the wp-configuration.php file<\/b><\/h3>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">This will allow you to combat any backdoor scripts that an attacker uses to make changes to your WordPress website. To disable PHP reporting means you\u2019re not putting everything out on a plate for cybercriminals to harm your website. You can modify the php file:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Go to your site\u2019s wp-config.php file using an FTP client.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">All you need to do is, add this code to the php directory files that you want to obscure access for.<\/span><\/li>\n<\/ul>\n<div class=\"highlight-code\"><span style=\"font-weight: 400;\">&lt;files wp-config.php&gt;<\/span><br \/>\n<span style=\"font-weight: 400;\">order allow,deny<\/span><br \/>\n<span style=\"font-weight: 400;\">deny from all<\/span><br \/>\n<span style=\"font-weight: 400;\">&lt;\/files&gt;<\/span><br \/>\n<span style=\"font-weight: 400;\">&lt;files wp-config.php&gt; order allow,deny deny from all &lt;\/files&gt;<\/span><br \/>\n<span style=\"font-weight: 400;\">&lt;files wp-config.php&gt;<\/span><br \/>\n<span style=\"font-weight: 400;\">order allow,deny<\/span><br \/>\n<span style=\"font-weight: 400;\">deny from all<\/span><br \/>\n<span style=\"font-weight: 400;\">&lt;\/files&gt;<\/span><\/div>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Save the changes<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Or else, you can use cpanel to block the potential edit threats in your wp-config.php file:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">From your hPanel dashboard, go to the <\/span><b>Advanced section.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hit on <\/span><b>PHP Configuration.<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Under the <\/span><b>PHP Options<\/b><span style=\"font-weight: 400;\"> tab, uncheck the <\/span><b>display Errors option<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Click on <\/span><b>Save.<\/b><\/li>\n<\/ul>\n<h3><b>2. Change default WP database prefix<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">To prevent any unauthorized SQL injections in your WordPress website, you must change its database prefix to something unique and difficult to guess.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">One way to do this is by using WP CMS and renaming the prefix when you link it with your web hosting. Another way is to use a plugin. Once installed and activated, go to your dashboard &gt; Tools &gt; select the plugin name and change the new prefix name.<\/span><\/p>\n<h3><b>3. Block hotlinking from other sites<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">If your media files are being hotlinked by a source, you can avert them by blocking their access. Read further as we explain how to do so\u2026..<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Using .htaccess file via FTP, you can enter the following code into your WordPress root delivery:\u00a0<\/span><\/p>\n<div class=\"highlight-code\"><span style=\"font-weight: 400;\">RewriteEngine on<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">RewriteCond %{HTTP_REFERER} !^$<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">RewriteCond %{HTTP_REFERER} !^http(s)?:\/\/(www\\.)?yourdomain.com [NC]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">RewriteRule \\.(jpg|jpeg|png|gif)$ &#8211; [NC,F,L]<\/span><\/div>\n<p><span style=\"font-weight: 400;\">Simply enter \u201cyourdomain\u201d with actual domain name and\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">save the changes.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Alternatively, you can use a CDN or plugin to do so.\u00a0<\/span><b><\/b><\/p>\n<h3><b>4. Hide WordPress Version<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Displaying your WordPress version number can stand in the way of you and your website security. That\u2019s why whosoever searches for <\/span><span style=\"font-weight: 400;\">how to secure a wordpress website<\/span><span style=\"font-weight: 400;\"> using a plugin is recommended to use Sucuri plugin. As one of its top-vigilant features, it removes your WP version number from catching the attention of hackers in site files.\u00a0<\/span><b><\/b><\/p>\n<h3><b>5. Change your web hosting<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">A safe and secure web hosting is an inseparable component of a reliable website. If your WP website is integrated with a wrong or low-quality hosting provider services, no matter how much you read about <\/span><span style=\"font-weight: 400;\">how to secure a wordpress website<\/span><span style=\"font-weight: 400;\">. So ensure you\u2019ve signed up for the bestest hosting provider in terms of security, features and support\/maintenance.\u00a0<\/span><b><\/b><\/p>\n<h3><b>6. Manage file and folder permissions<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">With a loose grip over file and folder permissions can make your website security land in trouble. That\u2019s the reason experts always suggest controlling and managing these permissions from behind the scenes. Use an FTP or file manager to alter the permissions for writing, viewing and accessing the codes.\u00a0<\/span><b><\/b><\/p>\n<h3><b>7. Choose appropriate user roles<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Giving unnecessary access to the users on your site can become a plausible cause of trouble and headache for you. Thus defining the right role is imperative for WordPress site security. The platform provides 6 user roles that are as follows:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Administrator<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Super Admin<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Author<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contributor<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Subscriber<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Editor<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">You can read about each of these roles in this <\/span><span style=\"font-weight: 400;\">WP User Roles &amp; Responsibility guide<\/span><span style=\"font-weight: 400;\">.<\/span><b><\/b><\/p>\n<h3><b>8. Install a firewall<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Another practice that fosters your WP site\u2019s security is implementing a firewall &#8211; which serves as a blanket of protection to safeguard your site from any potent and harmful attack from a hacker like XSS, CSRF, SQL injection, etc. Since WordPress doesn\u2019t come with a built-in firewall, we suggest using the one that suits best your needs and server requirements<\/span><\/p>\n<p><span style=\"font-weight: 400;\">People usually install the Web Application Firewall (WAF) plugin, however, you must assess its functionality based on your requirements.\u00a0\u00a0<\/span><b><\/b><\/p>\n<h3><b>9. Use secure theme and plugins<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In search of the best themes and plugins for WordPress, it is very crucial to know their source. Yes, you read that right! From where you download or install a plugin or theme matters because hackers can be sitting right there for you with a trap or else a free service provider might not be able to match the required security standards. That\u2019s why it is advised to download plugins from WordPress.org to not compromise on their credibility.\u00a0<\/span><b><\/b><\/p>\n<h3><b>10. Monitor user activity\/account<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Last but not the least, always keep a tab on the ongoing activities in your WordPress website. Whether it\u2019s an unusual plugin configuration, an unknown post or a change in administrator settings, anything can lead to a drastic risk. It\u2019s best to monitor these activities for every user from your admin dashboard. If you&#8217;re short of time to look after this, it\u2019s better to hire a maintenance team or services rather than neglecting it.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You can also use plugins like Activity Log, WP Activity Log, Simple History, etc.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span><b>Conclusion\u00a0<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">In these alarming times of cyberattacks, you can\u2019t just neglect the security of your website even if it is built on one of the most trusted CMS like WordPress. That\u2019s why you must get the grasp of <\/span><span style=\"font-weight: 400;\">how to secure a WordPress website<\/span><span style=\"font-weight: 400;\">. The above article has listed 20 such ways that will transform the status of your website\u2019s security for good.\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A research conducted by W3Techs suggests that WordPress holds 62.6% of the market share at present, being the&hellip;<\/p>\n","protected":false},"author":6,"featured_media":56456,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,44],"tags":[],"class_list":["post-56453","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-web-design-development","category-website-design-development"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How To Secure A Wordpress Website 2024: 20 Best Security Tips - Mindmingles<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How To Secure A Wordpress Website 2024: 20 Best Security Tips - Mindmingles\" \/>\n<meta property=\"og:description\" content=\"A research conducted by W3Techs suggests that WordPress holds 62.6% of the market share at present, being the&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/\" \/>\n<meta property=\"og:site_name\" content=\"Mindmingles\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-28T12:58:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-To-Secure-A-Wordpress-Website7-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"702\" \/>\n\t<meta property=\"og:image:height\" content=\"940\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Gurleen Kaur\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Gurleen Kaur\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/\"},\"author\":{\"name\":\"Gurleen Kaur\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/#\\\/schema\\\/person\\\/6e499fc048e110e01bfa16f2c5a682fd\"},\"headline\":\"How To Secure A WordPress Website 2024: 20 Best Security Tips\",\"datePublished\":\"2024-08-28T12:58:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/\"},\"wordCount\":3326,\"image\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/How-to-secure-a-wordpress-website-1.png\",\"articleSection\":[\"Web Design &amp; Development\",\"Website Design &amp; Development\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/\",\"url\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/\",\"name\":\"How To Secure A Wordpress Website 2024: 20 Best Security Tips - Mindmingles\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/How-to-secure-a-wordpress-website-1.png\",\"datePublished\":\"2024-08-28T12:58:17+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/#\\\/schema\\\/person\\\/6e499fc048e110e01bfa16f2c5a682fd\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/How-to-secure-a-wordpress-website-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/How-to-secure-a-wordpress-website-1.png\",\"width\":800,\"height\":500,\"caption\":\"How to secure a wordpress website\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/how-to-secure-a-wordpress-website\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How To Secure A WordPress Website 2024: 20 Best Security Tips\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/\",\"name\":\"Mindmingles\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.mindmingles.com\\\/blog\\\/#\\\/schema\\\/person\\\/6e499fc048e110e01bfa16f2c5a682fd\",\"name\":\"Gurleen Kaur\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/837d617fce1226d46779b76ecf54f0fe0e09889605775be0fc27f85760ecbbaf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/837d617fce1226d46779b76ecf54f0fe0e09889605775be0fc27f85760ecbbaf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/837d617fce1226d46779b76ecf54f0fe0e09889605775be0fc27f85760ecbbaf?s=96&d=mm&r=g\",\"caption\":\"Gurleen Kaur\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How To Secure A Wordpress Website 2024: 20 Best Security Tips - Mindmingles","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/","og_locale":"en_US","og_type":"article","og_title":"How To Secure A Wordpress Website 2024: 20 Best Security Tips - Mindmingles","og_description":"A research conducted by W3Techs suggests that WordPress holds 62.6% of the market share at present, being the&hellip;","og_url":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/","og_site_name":"Mindmingles","article_published_time":"2024-08-28T12:58:17+00:00","og_image":[{"width":702,"height":940,"url":"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-To-Secure-A-Wordpress-Website7-1.png","type":"image\/png"}],"author":"Gurleen Kaur","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Gurleen Kaur","Est. reading time":"17 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#article","isPartOf":{"@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/"},"author":{"name":"Gurleen Kaur","@id":"https:\/\/www.mindmingles.com\/blog\/#\/schema\/person\/6e499fc048e110e01bfa16f2c5a682fd"},"headline":"How To Secure A WordPress Website 2024: 20 Best Security Tips","datePublished":"2024-08-28T12:58:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/"},"wordCount":3326,"image":{"@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website-1.png","articleSection":["Web Design &amp; Development","Website Design &amp; Development"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/","url":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/","name":"How To Secure A Wordpress Website 2024: 20 Best Security Tips - Mindmingles","isPartOf":{"@id":"https:\/\/www.mindmingles.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#primaryimage"},"image":{"@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website-1.png","datePublished":"2024-08-28T12:58:17+00:00","author":{"@id":"https:\/\/www.mindmingles.com\/blog\/#\/schema\/person\/6e499fc048e110e01bfa16f2c5a682fd"},"breadcrumb":{"@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#primaryimage","url":"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website-1.png","contentUrl":"https:\/\/www.mindmingles.com\/blog\/wp-content\/uploads\/2024\/08\/How-to-secure-a-wordpress-website-1.png","width":800,"height":500,"caption":"How to secure a wordpress website"},{"@type":"BreadcrumbList","@id":"https:\/\/www.mindmingles.com\/blog\/how-to-secure-a-wordpress-website\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mindmingles.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How To Secure A WordPress Website 2024: 20 Best Security Tips"}]},{"@type":"WebSite","@id":"https:\/\/www.mindmingles.com\/blog\/#website","url":"https:\/\/www.mindmingles.com\/blog\/","name":"Mindmingles","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mindmingles.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.mindmingles.com\/blog\/#\/schema\/person\/6e499fc048e110e01bfa16f2c5a682fd","name":"Gurleen Kaur","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/837d617fce1226d46779b76ecf54f0fe0e09889605775be0fc27f85760ecbbaf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/837d617fce1226d46779b76ecf54f0fe0e09889605775be0fc27f85760ecbbaf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/837d617fce1226d46779b76ecf54f0fe0e09889605775be0fc27f85760ecbbaf?s=96&d=mm&r=g","caption":"Gurleen Kaur"}}]}},"_links":{"self":[{"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/posts\/56453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/comments?post=56453"}],"version-history":[{"count":0,"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/posts\/56453\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/media\/56456"}],"wp:attachment":[{"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/media?parent=56453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/categories?post=56453"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mindmingles.com\/blog\/wp-json\/wp\/v2\/tags?post=56453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}