{"id":17954,"date":"2019-10-17T09:30:14","date_gmt":"2019-10-17T09:30:14","guid":{"rendered":"https:\/\/www.heartinternet.uk\/blog\/?p=17954"},"modified":"2019-10-17T09:30:14","modified_gmt":"2019-10-17T09:30:14","slug":"easy-wordpress-security-tips","status":"publish","type":"post","link":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/","title":{"rendered":"6 easy WordPress security tips"},"content":{"rendered":"

As part of our ongoing improvements to the system, we are removing the reCAPTCHA v1 service from our WordPress installations.<\/p>\n

This was set up in 2013 and the security world has moved on from simple “Are you a human?” responses. As WordPress has become more popular, it’s more likely that hackers will write scripts specifically to attack WordPress sites.<\/p>\n

If you’re wondering how secure your WordPress site will be, don’t worry – there are very simple things you can do to make sure everything runs smoothly.<\/p>\n

Keep WordPress up to date<\/h2>\n

\"Person<\/p>\n

This is the most obvious one, and, yet, it’s the one everyone forgets to do. But now’s your chance. Stop reading this and go update your site.<\/p>\n

Right now.<\/p>\n

Update your plug-ins too.<\/p>\n

That was easy, wasn’t it?<\/p>\n

Make sure your passwords are strong<\/h2>\n

\"Bottom<\/p>\n

This is another obvious one, but it’s also the one everyone falls down on. And it’s not a matter of adding in all the characters and numbers – it’s about having unique passwords for each site. No longer having the same email address\/password combination for Netflix\/Steam\/WordPress\/Google\/DropBox\/that tiny little forum you still hang out at.<\/p>\n

Check Have I Been Pwned<\/a> and if you show up, change your passwords. Even if you don’t show up, change your passwords. Use KeePass<\/a> or another password management tool and keep them with you.<\/p>\n

And once you’ve sorted out your passwords, you can make logging in an even more secure process by adding two-factor authentication. Try miniOrange’s Google Authenticator<\/a>.<\/p>\n

Clean up your users<\/h2>\n

\"A<\/p>\n

Have people left your company? Did you get guest authors in? How many users do you have on your WordPress installation? And what are their permissions?<\/p>\n

This might not seem like a big deal, but the recent ICO ruling against Carphone Warehouse<\/a> found that their \u00a3400,000 data breach was the result of someone using a valid WordPress login on an outdated site.<\/p>\n

So what do you do with these unwanted users? If they haven’t posted anything, delete them. There’s no reason to keep them around and they’re just a risk.<\/p>\n

If they have posted something, and you’d like to keep them as an author, you can set their role to “No role for this installation”. This means that they can try to log in, but then once they log in, it doesn’t let them do anything else, and they can’t access the Admin screen after.<\/p>\n

Get a good plug-in<\/h2>\n

There are hundreds of security-related plug-ins<\/a> available, containing everything under the sun, from firewalls and brute force testers to two-factor authentication and anti-spam measures. Luckily, most of them are free or have trial versions, so you can test them and see which works best for you. You can also judge the plug-ins by the number of downloads and the ratings.<\/p>\n

We recommend Sucuri Security. It’s free and it’s a good addition to your overall security efforts.<\/p>\n

And don’t forget that Jetpack<\/a> comes with a lot of security features, and it’s automatically installed on your installation of WordPress.<\/p>\n

You should also double-check all your existing plug-ins to make sure they’re still regularly maintained and kept secure. Just recently, thousands of sites, including the NHS and ICO, were turned into cryptominers by one third-party script that had been hijacked<\/a>.<\/p>\n

Back up regularly<\/h2>\n

\"An<\/p>\n

Of course, no matter how much we lock everything down, no matter how many plug-ins or security measures we’ve taken, we can still get hacked.<\/p>\n

This is where regular backups come in. Even if you do get hacked, you can just revert back to a previous version with a minimum of data loss.<\/p>\n

You can use the backup feature in the eXtend Control Panel to take a backup of your entire site, but you’ll need to remember to take those backups, as well as remembering to back up the database separately.<\/p>\n

Jetpack also has a backup feature, which you can set to do a daily backup.<\/p>\n

Or you can get a separate plug-in, many of which will back up your site to another cloud service, such as AWS, DropBox, or Google Drive. UpdraftPlus<\/a> is a popular one, as is BackWPup<\/a>.<\/p>\n

Use a website security package<\/h2>\n

All these tips are helpful, but they might not be enough to stop a determined hacker. That’s why you should use a tool like Website Security from Heart Internet.<\/a><\/p>\n

It scans for and removes malware, and the Deluxe and Ultimate packages include a firewall, which makes your site even more secure.<\/p>\n

Because Website Security is powered by Sucuri, you get the piece of mind that comes with being\u00a0 protected by industry-leading security experts.<\/p>\n","protected":false},"excerpt":{"rendered":"

As WordPress becomes even more popular, it’s more likely that hackers will write scripts specifically to attack WordPress sites. But don’t worry – there are very simple things you can do to make sure everything runs smoothly and securely.<\/p>\n","protected":false},"author":2,"featured_media":17960,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,29],"tags":[],"class_list":{"0":"post-17954","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-wordpress","8":"category-your-website"},"yoast_head":"\n6 easy WordPress security tips - Heart Internet<\/title>\n<meta name=\"description\" content=\"As WordPress becomes even more popular, it's more likely that hackers will write scripts specifically to attack WordPress sites. But don't worry - there are very simple things you can do to make sure everything runs smoothly and securely.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"6 easy WordPress security tips - Heart Internet\" \/>\n<meta property=\"og:description\" content=\"As WordPress becomes even more popular, it's more likely that hackers will write scripts specifically to attack WordPress sites. But don't worry - there are very simple things you can do to make sure everything runs smoothly and securely.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\" \/>\n<meta property=\"og:site_name\" content=\"Heart Internet\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/heartinternet\/\" \/>\n<meta property=\"article:published_time\" content=\"2019-10-17T09:30:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1265\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Eliot Chambers-Ostler\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@heartinternet\" \/>\n<meta name=\"twitter:site\" content=\"@heartinternet\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eliot Chambers-Ostler\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\"},\"author\":{\"name\":\"Eliot Chambers-Ostler\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28\"},\"headline\":\"6 easy WordPress security tips\",\"datePublished\":\"2019-10-17T09:30:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\"},\"wordCount\":767,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg\",\"articleSection\":[\"WordPress\",\"Your Website\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\",\"name\":\"6 easy WordPress security tips - Heart Internet\",\"isPartOf\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg\",\"datePublished\":\"2019-10-17T09:30:14+00:00\",\"description\":\"As WordPress becomes even more popular, it's more likely that hackers will write scripts specifically to attack WordPress sites. But don't worry - there are very simple things you can do to make sure everything runs smoothly and securely.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg\",\"contentUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg\",\"width\":1265,\"height\":500},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.heartinternet.uk\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"6 easy WordPress security tips\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/heartblog.victory.digital\/#website\",\"url\":\"https:\/\/heartblog.victory.digital\/\",\"name\":\"Heart Internet\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/heartblog.victory.digital\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/heartblog.victory.digital\/#organization\",\"name\":\"Heart Internet\",\"url\":\"https:\/\/heartblog.victory.digital\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp\",\"contentUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp\",\"width\":992,\"height\":252,\"caption\":\"Heart Internet\"},\"image\":{\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/heartinternet\/\",\"https:\/\/x.com\/heartinternet\",\"https:\/\/www.linkedin.com\/company\/heart-internet-ltd\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28\",\"name\":\"Eliot Chambers-Ostler\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/heartblog.victory.digital\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg\",\"contentUrl\":\"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg\",\"caption\":\"Eliot Chambers-Ostler\"},\"url\":\"https:\/\/www.heartinternet.uk\/blog\/author\/eliot-chambers-ostler\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"6 easy WordPress security tips - Heart Internet","description":"As WordPress becomes even more popular, it's more likely that hackers will write scripts specifically to attack WordPress sites. But don't worry - there are very simple things you can do to make sure everything runs smoothly and securely.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/","og_locale":"en_GB","og_type":"article","og_title":"6 easy WordPress security tips - Heart Internet","og_description":"As WordPress becomes even more popular, it's more likely that hackers will write scripts specifically to attack WordPress sites. But don't worry - there are very simple things you can do to make sure everything runs smoothly and securely.","og_url":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/","og_site_name":"Heart Internet","article_publisher":"https:\/\/www.facebook.com\/heartinternet\/","article_published_time":"2019-10-17T09:30:14+00:00","og_image":[{"width":1265,"height":500,"url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg","type":"image\/jpeg"}],"author":"Eliot Chambers-Ostler","twitter_card":"summary_large_image","twitter_creator":"@heartinternet","twitter_site":"@heartinternet","twitter_misc":{"Written by":"Eliot Chambers-Ostler","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#article","isPartOf":{"@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/"},"author":{"name":"Eliot Chambers-Ostler","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28"},"headline":"6 easy WordPress security tips","datePublished":"2019-10-17T09:30:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/"},"wordCount":767,"commentCount":1,"publisher":{"@id":"https:\/\/heartblog.victory.digital\/#organization"},"image":{"@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage"},"thumbnailUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg","articleSection":["WordPress","Your Website"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/","url":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/","name":"6 easy WordPress security tips - Heart Internet","isPartOf":{"@id":"https:\/\/heartblog.victory.digital\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage"},"image":{"@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage"},"thumbnailUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg","datePublished":"2019-10-17T09:30:14+00:00","description":"As WordPress becomes even more popular, it's more likely that hackers will write scripts specifically to attack WordPress sites. But don't worry - there are very simple things you can do to make sure everything runs smoothly and securely.","breadcrumb":{"@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#primaryimage","url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg","contentUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2018\/02\/wordpressecurity-background.jpg","width":1265,"height":500},{"@type":"BreadcrumbList","@id":"https:\/\/www.heartinternet.uk\/blog\/easy-wordpress-security-tips\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.heartinternet.uk\/blog\/"},{"@type":"ListItem","position":2,"name":"6 easy WordPress security tips"}]},{"@type":"WebSite","@id":"https:\/\/heartblog.victory.digital\/#website","url":"https:\/\/heartblog.victory.digital\/","name":"Heart Internet","description":"","publisher":{"@id":"https:\/\/heartblog.victory.digital\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/heartblog.victory.digital\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/heartblog.victory.digital\/#organization","name":"Heart Internet","url":"https:\/\/heartblog.victory.digital\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/","url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp","contentUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/02\/HeartInternet_Logo_Colour.webp","width":992,"height":252,"caption":"Heart Internet"},"image":{"@id":"https:\/\/heartblog.victory.digital\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/heartinternet\/","https:\/\/x.com\/heartinternet","https:\/\/www.linkedin.com\/company\/heart-internet-ltd"]},{"@type":"Person","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/person\/58ed7f27cc0f3ab6e69135742a5eee28","name":"Eliot Chambers-Ostler","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/heartblog.victory.digital\/#\/schema\/person\/image\/","url":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg","contentUrl":"https:\/\/www.heartinternet.uk\/blog\/wp-content\/uploads\/2025\/08\/cropped-Eliot-96x96.jpg","caption":"Eliot Chambers-Ostler"},"url":"https:\/\/www.heartinternet.uk\/blog\/author\/eliot-chambers-ostler\/"}]}},"_links":{"self":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/17954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/comments?post=17954"}],"version-history":[{"count":0,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/17954\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/media\/17960"}],"wp:attachment":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/media?parent=17954"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/categories?post=17954"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/tags?post=17954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}