WordPress Security (5th Part)

This is the 5th part of our WordPress security course. I strongly recommend reading the 1st part, 2nd part, 3rd part and 4th part if you didn’t read.

Delete unnecessary files: Some files come with WordPress which don’t need WordPress to work. You should delete them immediately.

Unnecessary files are wp-config-sample.php, readme.html and install.php.

readme.html is a file that has all the information of WordPress like WordPress version etc. This is the information that the hacker really needs to attack your website.

For more details, read this article.

Passwordless login: Are you tired of very long complicated secure passwords? Do you want to get rid of them? Do you want to achieve the same security easily?

Yes, there is a way of logging in without a password. We call it passwordless login.

You just enter your username or email address and you receive a login link via mobile phone or email address. The login link just needs a single click to log in. Nothing else.

This is not only for easiness, this is a more secure way also and acts as a 2FA.

Not only this, but it also saves you from keylogger software. Keylogger is a kind of software that records everything you type with the help of your keyboard and send it somewhere to the intruder.

Now imagine, what if the login and credit card details are stolen from you through keylogger software🤔?

You can search online and find many free and premium keylogger software.

Here is a more detailed article on this topic.

Remove unused themes and plugins: Delete unused themes and plugins if you don’t need them. This can help you with security as well as SEO.

An unused theme or plugin may have a vulnerability and attackers can use it to enter your website. Thats why I suggest you remove everything unused.

If you remove them, then your website speed will also increase and remember Google favours all those websites that load faster.

Hide PHP Version: There is no guarantee of no bug in a website. Every website or software may have a bug. This is the reason, we see daily new releases of different software.

This means the PHP version, we are using may have a bug? Yes probably.

Thats why it is better to hide the versions of the software we’re running on our server like PHP etc.

Here you can read how to hide the PHP version.

Continue to the 6th part of this course.