WordPress security hardening

Secure Your WordPress Site

Protect your WordPress installation from hackers and malware.

Essential Security Steps

1. Keep Everything Updated

• WordPress core
• All themes (including inactive)
• All plugins (delete unused ones)

2. Use Strong Credentials

• Never use "admin" as username
• Use passwords 12+ characters
• Enable two-factor authentication

3. Install Security Plugin

Recommended options:

• Wordfence - Firewall + malware scanner
• Sucuri - Security hardening
• iThemes Security - Various protections

4. Secure wp-config.php

Add to wp-config.php:

define('DISALLOW_FILE_EDIT', true);

This prevents theme/plugin editing from dashboard.

5. Limit Login Attempts

Install "Limit Login Attempts Reloaded" plugin.

6. Hide WordPress Version

Add to functions.php:

remove_action('wp_head', 'wp_generator');

7. Regular Backups

Use UpdraftPlus for automatic backups.