Tag
Keeping a WordPress site from getting hacked.
WordPress Tutorials
WordPress does this without a plugin, in about fifteen seconds. What matters is knowing exactly what that protection covers, because it does not cover the images on the page.
WordPress Tutorials
Two separate jobs get conflated here: putting a certificate on the server, and telling WordPress to use it. The second one is where sites break, and a plugin only papers over it.
Troubleshooting
Removing malware is the easy half. The half people skip is proving it is gone, and every scanner type is blind to something the others catch.
Website Tools
Automation platforms let a form submission become a CRM record, an invoice and a calendar event without a developer. They also put business logic somewhere nobody documents and everybody forgets.
Plugins
MainWP is a self-hosted dashboard that updates, backs up and monitors your other WordPress sites. Owning the dashboard is the point, and it is also the risk you take on.
Plugins
Forminator gives away features that competing form plugins charge for — payments, calculations, quizzes and polls — and stores every submission in your database, which is a benefit and an obligation.
Plugins
BuddyPress adds profiles, activity streams, groups and private messaging to WordPress. The plugin is the easy part; the moderation, the performance and the theme work are the actual project.
Plugins
CleanTalk filters spam without showing visitors a challenge, which is its whole appeal. It does that by sending every submission to a hosted service, which is the fact that should decide whether you use it.
Plugins
WPScan checks what you are running against a database of known WordPress vulnerabilities. It answers one narrow question extremely well, and mistaking it for general security tooling is the usual error.
Plugins
UpdraftPlus is the most widely installed WordPress backup plugin, and the free version does the essential job. The part that matters is not which plugin you use — it is whether you have ever restored one.
Plugins
Akismet is effective, nearly effortless, and works by sending every comment to a third party for judgement. That last fact is the one that should decide whether you use it.
Plugins
2FA is the single highest-value security change on most WordPress sites, because it defeats the attack that actually succeeds: a correct password someone else has.