Wordpress Security

Welcome to wpsecure.org, a resource dedicated to helping you beef up your WordPress blog security. This is a completely free resource and in the open source spirit of the WordPress platform, everything you read and see is uncopyrighted.

You can either navigate using the links to your right, or simply look through the chapter listings below.

Help the Secure WordPress project.

Chapters

• Introduction
  • What is the Secure WordPress project?
  • How to Use this Guide
  • Credits
• Fundamentals
  • Basics of Blog Security
  • How to Secure Your WordPress Blog, a Quick Start Guide
• Sensitive Files & Folders (and How to Protect Them)
  • How to Protect /wp-admin
  • How to Protect wp-config.php
• User Accounts & Passwords
  • Delete the Default Administrator
  • Managing Passwords with Software
  • Strong Passwords
  • Use an Account with Limited Access
• .htaccess Hacks
  • Deny Access to readme.html
  • Deny Access to wp-config.php
  • Perishable 3G Blacklist
  • Secure Your wp-admin folder
• Wordpress Wizardry
  • Cookie Encryption
  • Hide Login Errors
  • Hide the Version Number
  • Move wp-config.php
  • Updating WordPress
  • Other WordPress Tricks
• Plugins
  • Antivirus for WordPress (+)
  • AskApache Password Protect (+)
  • Login Lockdown (+)
  • One Click Plugin Updater (+)
  • Stealth Login (+)
  • WordPress Backup (+)
  • WordPress Firewall (+)
  • WordPress Secure (+)
  • WP-DB-Backup (+)
• Best Practices
  • Blogging from Public Computers
• Backups
  • Email Backups
  • Ethical and Privacy Issues of Data Storage
  • Local Backups
  • Web Host Backups
• Spam
  • Disable Comments on Older Posts
  • Plugin: WP-SpamFree (+)