How to Boost Your WordPress Security

by Natalia Moreau
In Tips & Tricks
— 23 Aug, 2014

There is another reason that WordPress is popular over the web because of its security features. You may use latest WordPress versions and plugins to make sure that your site is secure from hackers. However, here we found some more steps to boost your WordPress site security that will surely beneficial for your site. You may follow these steps easily and make your site safe from hackers.

Disable logins from other IPs

You may use Login LockDown WordPress plugin to disable logins from certain IP addresses, this plugin prevent the other users to login on your WordPress admin panel. If the plugin found more login attempts on your site it will block the IP for a short period to login on the site.

Blacklist IPs for wp-admin

If you want more security of your site it is possible you may blacklist all other IP’s expect your IP address. The other users will not be able to login in to wp-admin folder. The below given code will help you to do this job easily. Simply add this code anywhere in the field with your IP numbers by finding it from “what is my IP” in Google.

You may add different IP addresses if you have to login on different computers or internet connections so don’t forget to add all of your IPs to enable your logins.

[sourcecode]
order deny,allow

deny from all

# whitelist home IP address

allow from YOURIPNUMBER

# whitelist work IP address

allow from YOURIPNUMBER

# whitelist holiday IP address

allow from YOURIPNUMBER
[/sourcecode]

Disallow guest user registrations

If you are running a blog or a site that doesn’t need membership, so you should disallow the guest users’ registration on your site. Simply go to Setting and uncheck the “Anyone can register” option. Your site will be prevented the unknown user’s registration.

Disallow allow pings

DDOS attack are the most popular attacks on WordPress sites and pingback enabling would be a major cause to affect your site from this attack. In order to unable pings on your site go to Settings>>Discussion>>Default Article Settings and tick off the “Allow link notification” option to off the pingback on your WordPress site.

These steps seems to be very simple but have a great security clearance for your WordPress website. Once you implement these steps on your WordPress site you probably would never face any hacking problem on your site and focus on blogging without any hesitation.