[ad_1]
Hello, I’ll be building a WordPress website that will contain sensitive content, and I want to make sure security is maxed out. I was wondering, what security measures do you place to make sure your website is safe.
I was told about custom login URLs and IP Address blocking (for the login page). Is there anything else I should do that would help make the website safer?
[ad_2]
*I was told about custom login URLs* – that’s an urban myth that people love to spread, esp in this sub. There’s more than 1 way to login into WP.
Keep your WP, theme and plugins up to date at all time. Ensure all accounts are using strong/complex passwords. Use Wordfence to alert you to any issues like plugin vulnerabilities, weak passwords, etc.
Use Cloudflare to block traffic from any countries you don’t need traffic from. Also block xmlrpc and block access to wp-login.php from locations that don’t need it.
Use good hosting – not garbage shared hosting like GoDaddy, Hostgator, etc.
“Sensitive content” – ensure you check your local/state/federal laws if applicable.