Security
Articles about security on WordPress: what each setting does, why it matters, and how to change it.
-
Security
What Is XML-RPC in WordPress and Why You Should Disable It
XML-RPC in WordPress is a legacy feature that hackers exploit for brute force and DDoS attacks. Here's what it does and how to safely disable it.
-
Security
How to Hide Your WordPress Login Page from Bots and Hackers
Your WordPress login page at /wp-admin is the #1 target for bots. Here's how to hide it behind a custom URL and stop brute force attacks cold.
-
Security
How to Limit Login Attempts in WordPress (Stop Brute Force Attacks)
WordPress allows unlimited login attempts by default. That's an open invitation for brute force attacks. Here's how to add a lockout in under a minute.
-
Security
Why You Should Hide Your WordPress Version Number
WordPress broadcasts your version number in the HTML source, RSS feed, and REST API. Here's why that helps attackers and how to hide it in 30 seconds.
-
Security
Five WordPress hardening rules that won’t break your site
Most WordPress hardening guides don't tell you which rules are safe and which will break WooCommerce. Here are five that work on virtually every site.