After the cleanup

Secure WordPress and prevent reinfection

Harden WordPress, close the holes and build the habits that keep you from getting hacked again.

Secure & prevent

Guide Securing WordPress after a hack: the hardening checklist

A site that's cleaned but not hardened often gets reinfected through the same hole. Here's the security checklist to run right after cleanup to close the door for good.

Read
Secure & prevent

Backing up WordPress: how to never lose everything

A good backup turns a hack into a minor setback. Here's what to back up, how often, where to store it, and how to confirm it actually works.

Read Secure & prevent

Protect the WordPress login page against brute-force attacks

The wp-login.php page is the number one target for bots. Here's how to hide it, limit login attempts, and block brute-force attacks without making your life complicated.

Read Secure & prevent

Why WordPress sites get hacked (and how to prevent it)

WordPress doesn't get hacked because it's insecure, but because of a few very concrete weak spots. Here are the real causes of a hack and how to shut them down.

Read
All articles