Use an Account with Limited Access

Wordpress has fairly comprehensive user permission management. It’s quite simple to create users that can only publish posts. And why does that matter? Because it’s a fantastic way to prevent hackers from getting any real control over your blog.

Most Wordpress users will have a single user account, and that account will be the administrative account, therefore having full access to do everything. The problem with this is if that account is compromised a whole bunch of nasty things can be done to your blog.

Create a separate user account that only has permissions to perform basic blogging tasks (publish posts, delete posts etc) and start using this account to update your blog. If you ever succumb to a phishing attack or some other method to steal your password, the intruder will end up with this limited access account which can’t do much in the first place, and then can easily be deleted (any posts assigned to the user can be re-assigned to another user).

If you’re blogging from public computers or an application needs your username and password (such as a desktop blogging tool) then using a limited access account will give you the peace of mind that no significant damage can be done if the account is ever compromised.

You might also want to read...

Leave a Reply