Tag
Keeping a WordPress site from getting hacked.
Plugins
UpdraftPlus is the most widely installed WordPress backup plugin, and the free version does the essential job. The part that matters is not which plugin you use — it is whether you have ever restored one.
Plugins
Akismet is effective, nearly effortless, and works by sending every comment to a third party for judgement. That last fact is the one that should decide whether you use it.
Plugins
2FA is the single highest-value security change on most WordPress sites, because it defeats the attack that actually succeeds: a correct password someone else has.
Troubleshooting
Mixed content means an HTTPS page is pulling something over HTTP. The padlock disappears, scripts get blocked outright, and the fix is to correct the stored URLs rather than to rewrite them on every request.
WordPress Tutorials
Multisite runs many sites from one codebase and one user table. It is excellent for a network you control end to end, and a poor fit for unrelated client sites — the decision is mostly about who administers what.
WordPress Tutorials
Losing the admin password does not lock you out of your own site — hosting access does everything wp-admin would have done, and usually does it more reliably.
WordPress Tutorials
The REST API is not an optional add-on you can switch off — the block editor and much of the admin depend on it. The real work is choosing an authentication model and deciding what anonymous callers are allowed to read.
WordPress Tutorials
The mobile app is a writing and moderation tool, not a pocket-sized wp-admin. Most of the frustration around it comes from one thing: the difference between a WordPress.com account and a self-hosted site.
Plugins
A donation is not a purchase, and treating it like one costs you money at the form. The categories differ mainly in how they handle recurring giving, receipts and donor records.
Plugins
Searching for an AI chatbot plugin and searching for a ChatGPT or Claude plugin returns two unrelated product categories, and the visitor-facing one has a failure mode the marketing never mentions: a confident answer about your refund policy that you never wrote.
Themes
For an IT firm the website is evidence, not decoration. A sluggish, jittery, over-animated site contradicts the sales copy in a way it never would for a florist.
Themes
A community site spends its life rendering pages the theme demo never shows you: threads, profiles, notifications, moderation queues. Every theme in this category is marketed on its logged-out homepage.