WordPress Login Security
Getting back to WP, there are a couple of ways you can make your Login more secure. Plugins that count the number of login attempts and then temporarily lock the user out after a certain number of failed attempts are great to have in place. Another excellent security hack is to hide the standard WP login, that way when a hacker tries to get logged into your site, they won’t even be able to find the login page. Again, there are plugins that will help you do this as well.
WordPress Security Plugin
Moving up to the next step, there are a number of WP Security plugins, that will perform various functions to keep you site secure. I like WordFence, I’ve used the free version of this plugin on a number of sites with great results. Among the features that WordFence does is it allows you to set up a firewall that will block the IP address of malicious traffic. They also provide a scanner that will examine all of the files in your installation and report on any that have been altered. It then gives you the option to repair the file or delete it.
WordPress Security Checklist
Lastly, here is a quick checklist that will help keep your WP site secure:
Passwords – Make sure they’re secure and random. Don’t different passwords for all of your logins. Change your passwords often
Keep your site updated: That means WordPress, your plugins and themes and the software that runs on your server
Use login security: hide the login page, lock out users who repeatedly enter incorrect login criteria
Use WordFence or some other security plugin.
With these simple tips you should be able to keep you site secure.