The slides from the presentation I gave at WordCamp Fayetteville on Guest Blogging.

1. WORDPRESS SECURITY
Tips and Tricks to Secure Your Site

2. A LITTLE ABOUT
ANDY CROFFORD
CONTACT INFO
Email: acrofford@gmail.com
Twitter: @andycrofford
WEBSITES
AppTa.co - http://appta.co
TechKing - http://testking.com/techking
Mobile Orchard - http://mobileorchard.com
ThemeFuse - http://theme fuse.com

3. HTTP://J.MP/WORDCAMPSTL
Slides available for download

4. #WCSTLSEC
#hashtag

5. WHY IS WORDPRESS
SECURITY IMPORTANT?

6. YOU VALUE YOUR SITE
AND ITS CONTENTS

7. WHY IS WORDPRESS
INSECURE?

8. IT IS OPEN SOURCE AND
ANYONE HAS ACCESS TO THE CODE

9. PLUGINS CAN LEAVE
THE DOOR OPEN

10. SO WHAT CAN YOU DO?

11. 1. KEEP WORDPRESS UP TO
DATE

12. 2. UPDATE PLUGINS
REGULARLY

13. 3. DO NOT USE ADMIN AS
YOUR USERNAME

14. 4. USE A SECURE PASSWORD

15. CHECK YOUR PASSWORD
STRENGTH AT:
HTTP://WWW.PASSWORDMETER.COM

16. 5. KEEP YOUR THEME
UPDATED

17. 6. RESTRICT ACCESS TO THE ADMIN
LOGIN PAGE BY IP ADDRESS

18. .HTACCESS
AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName "Access Control"
AuthType Basic
order deny,allow
deny from all
#IP address to whitelist
allow from xxx.xxx.xxx.xxx
Replace xxx.xxx.xxx.xxx with your IP address.

19. .HTACCESS
AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName "Access Control"
AuthType Basic
order deny,allow
deny from all
#IP address to whitelist
allow from xxx.xxx.xxx.*
Replace xxx.xxx.xxx.* with your IP address.

20. 7. MOVE YOUR WP-
CONFIG.PHP FILE

21. 8. CHANGE THE WORDPRESS
TABLE PREFIX

22. UPDATE
$TABLE_PREFIX

23. 9. USE SECRET KEYS

24. SECRET KEY GENERATOR
https://api.wordpress.org/secret-key/1.1/salt

25. SECURE KEYS

26. 10. HIDE LOGIN ERROR
MESSAGES

27. HIDE LOGIN ERRORS
add_filter('login_errors', create_function('$a', "return null;"));

28. 11. BACKUP, BACKUP, BACKUP

29. UTILIZE SECURITY
PLUGINS

30. 1. LOGIN LOCK DOWN
http://j.mp/wp-lockdown

31. 2. STEALTH LOGIN
http://j.mp/wp-stealth

32. 3. ADMIN SSL
http://j.mp/wp-adminssl

33. 4. BACKWPUP
http://j.mp/backwpup

34. PAID BACKUP SERVICES
• VaultPress - http://www.vaultpress.com
• Backup Buddy - http://j.mp/wp-backup buddy

35. QUESTIONS?

36. GET 6 MONTHS FREE SHARED HOSTING
FROM SITE5 (WWW.SITE5.COM)
WORDCAMP