Okay, you got me: WordPress security isn't the sexiest way to spend your time, but it could end up being one of the most profitable! Nothing is more caustic to the lining of your stomach than having your site go down, and wondering whether or not you've lost it all.
Installing the fix hacked wordpress site Scan plugin alert you that you may have missed, and will check most of this for you. It will also tell you that a user named"admin" exists. Of course, that is your administrative user name. If you wish you can follow a link and find instructions for changing that name. Personally, I think that a password is good security, and there have been no successful attacks on the blogs that I run, because I followed those steps.
A simple way to maintain WordPress safe is to use a few tools that are built-in. To begin with, don't allow people run a web host security scan to list the documents in your folders and automatically backup your entire web hosting account.
Exclude pages - This plugin adds a checkbox,"include this page in menus", which can be checked by default. If you uncheck it, the page will not appear in any listings of webpages (which includes, and is usually restricted to, your page navigation menus).
BACK UP your website frequently and keep a copy on your computer and off-site storage. If you have a very active site, back up daily. You spend a whole lot of money and time on your website, don't skip this! weblink The one solution that does it all is BackupBuddy, no additional plug-ins back up database, widgets, plugins and your files. Need to move your website to another server, this will do it!
However, I advise that you install the Login LockDown plugin in place of any.htaccess controls. From being allowed after three unsuccessful login important link attempts from a certain IP address for an hour, login requests will stop. If you do so, you can still get into your admin panel while away from your office, and yet you still have protection against hackers.