One of the most important questions we DON’T get asked when designing a website for a client is related to site security. As a team, we stress the importance of this over and over and over again. Yet, when it’s time to hand the new site off to the designated content manager, more often than not clients have a pretty relaxed “I’m not worried” attitude about maintaining site security. We’ve even seen content managers create a general “Admin” user account with a simplistic password for all team members to use. Not a best practice! This month we’re sharing 7 Popular WordPress Security Myths from the team at Wordfence to elevate this discussion to help you avoid losing control over your site and potentially risk your brand.
To get the complete explanation, visit the full article:
- Moving or Hiding ‘wp-admin’ Will Stop Brute Force Attacks
- Changing the WordPress Table Prefix Will Improve Security
- All That’s Needed to Lock Down a Site Is a Secure Username and Password
- My Site Isn’t Important Enough to Be Interesting to Attackers
- My Site Is Safe Because It Has an SSL Certificate
- My Site Uses a CDN or Cloud-based Firewall, Which Is the Same as the Wordfence Firewall
- WordPress Itself Is an Insecure Platform
Take heed and the appropriate measures for securing your site.