{"id":21213,"date":"2017-01-16T07:37:56","date_gmt":"2017-01-16T13:37:56","guid":{"rendered":"https:\/\/www.rosehosting.com\/blog\/?p=21213"},"modified":"2022-12-07T08:36:31","modified_gmt":"2022-12-07T14:36:31","slug":"5-tips-for-securing-your-wordpress-sites","status":"publish","type":"post","link":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/","title":{"rendered":"How to Secure a WordPress Site"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><p><img decoding=\"async\" class=\"alignnone size-full wp-image-25119\" src=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg\" alt=\"how to secure a wordpress site\" width=\"1200\" height=\"600\" srcset=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg 1200w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-150x75.jpg 150w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-300x150.jpg 300w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-768x384.jpg 768w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-1024x512.jpg 1024w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-860x430.jpg 860w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-680x340.jpg 680w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-500x250.jpg 500w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-400x200.jpg 400w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-200x100.jpg 200w, https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site-50x25.jpg 50w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<p>We&#8217;ll show you, How to Secure a WordPress Site. WordPress is by far the most popular blogging platform today. Being as popular as it is, it comes with its own strengths and weaknesses. The very fact that almost everybody uses it, makes it more prone to vulnerabilities. WordPress developers are doing a great job of fixing and patching the framework as new flaws are discovered, but that doesn&#8217;t mean that you can simply install and forget your installation. In this post, we will provide some of the most common ways of securing and strengthening a WordPress site. Securing a WordPress site is fairly easy task, just carefully follow this tutorial bellow. <!--more--><\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_65 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-662d416dc94f1\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"ez-toc-cssicon\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-662d416dc94f1\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#1-Always-use-SSL-when-logging-into-your-back-end\" title=\"1. Always use SSL when logging into your back-end\">1. Always use SSL when logging into your back-end<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#2-Be-picky-about-any-additional-plugins\" title=\"2. Be picky about any additional\u00a0plugins\">2. Be picky about any additional\u00a0plugins<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#3-Install-Wordfence\" title=\"3. Install Wordfence\">3. Install Wordfence<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#4-Lockdown-wp-admin-and-wp-loginphp-with-an-additional-password\" title=\"4. Lockdown \/wp-admin and \/wp-login.php\u00a0with an additional password\">4. Lockdown \/wp-admin and \/wp-login.php\u00a0with an additional password<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#5-Disablestop-user-enumeration\" title=\"5. Disable\/stop user enumeration\">5. Disable\/stop user enumeration<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#6-Disable-XML-RPC\" title=\"6. Disable XML-RPC\">6. Disable XML-RPC<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"1-Always-use-SSL-when-logging-into-your-back-end\"><\/span>1. Always use SSL when logging into your back-end<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>It goes without saying that you should always implement SSL if you are planning to do anything more than just a casual blog. Logging in onto your site without using an encrypted connection exposes your username and your password on the clear. Anyone sniffing traffic at the moment could discover your password. This is especially true if you are surfing on a WiFi or if you are connected to a public hotspot, then the chances that you will get hacked are even higher. Get a <a href=\"https:\/\/www.rosehosting.com\/ssl-certificates.html\">trusted SSL certificate<\/a>.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"2-Be-picky-about-any-additional-plugins\"><\/span>2. Be picky about any additional\u00a0plugins<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Being\u00a0developed by 3rd party developers, the quality and security of each plugin is always questionable and depends solely on the experience of its developer. When installing any additional plugins one should carefully choose the plugin and take into consideration its popularity as well as how often is the plugin being maintained. Poorly maintained plugins should be avoided as they are more prone to bugs and vulnerabilities which can be easily exploited.<\/p>\n<p>This topic is also as an addition to the previous topic about the SSL, since many plugins are incorrectly developed to the degree that they contain scripts that explicitly request insecure (HTTP) connections. Everything\u00a0seems fine as\u00a0long as your site is accessed via HTTP. However, once you decide to implement encryption and force the SSL access, that will immediately result in a broken site, because the scripts on these plugins\u00a0will continue to serve out their requests via HTTP, when the rest of your site is accessed with HTTPS.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"3-Install-Wordfence\"><\/span>3. Install Wordfence<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Being developed by Feedjit Inc., Wordfence is the most popular WordPress security plugin today and a must-have for every serious WordPress site, especially for those that utilize <a href=\"https:\/\/www.rosehosting.com\/woocommerce-hosting.html\">WooCommerce<\/a> or another WordPress eCommerce platform. Wordfence is not just a plugin\u00a0as it rather offers a collection of security features that will strengthen your site. It features a web application firewall, malware scanner,\u00a0live traffic analyzer and a variety of additional tools which can improve the security of your site. The firewall will block malicious login attempts by default, and can even be configured to block entire countries by their IP Address ranges. What we really like about Wordfence\u00a0is that even if your site is compromised for some reason i.e. with malicious scripts, Wordfence can be installed afterward to scan and clean your site from the infected files.<\/p>\n<p>The company offers free and paid subscription plans of the plugin, but even with the free plan, your site will be secured on a satisfactory level.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"4-Lockdown-wp-admin-and-wp-loginphp-with-an-additional-password\"><\/span>4. Lockdown \/wp-admin and \/wp-login.php\u00a0with an additional password<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Another step toward protecting your WordPress backend would be to additionally password protect any directories (read URLs) which are not meant to be used by anyone else except you. The \/wp-admin directory is on this list of critical directories already. If you don&#8217;t allow WordPress login for the normal users you should restrict the wp.login.php file with an additional password. Whether you use <a href=\"https:\/\/www.rosehosting.com\/blog\/password-protect-a-directory-using-htaccess\/\">Apache <\/a>or <a href=\"https:\/\/www.rosehosting.com\/blog\/password-protecting-directories-with-nginx\/\">Nginx<\/a>, you can visit those two articles to learn how to additionally secure your WordPress installation.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"5-Disablestop-user-enumeration\"><\/span>5. Disable\/stop user enumeration<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>This is a fairly easy way for an attacker to discover valid usernames on your site, (read to find out the admin username). So how does it work? It&#8217;s simple. On any WordPress site put the\u00a0\/?author=1 after the main URL. An example would be: wordpressexample.com\/?author=1<\/p>\n<p>To protect your site from this, simply install the\u00a0<a href=\"https:\/\/wordpress.org\/plugins\/stop-user-enumeration\/\">Stop User Enumeration<\/a> plugin.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"6-Disable-XML-RPC\"><\/span>6. Disable XML-RPC<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>RPC stands for Remote Procedure Calls, it&#8217;s a protocol that one program can use to request a service from a program located on another computer on a network. In terms of WordPress, XML-RPC allows you to post on your WordPress blog using popular weblog clients like Windows Live Writer but\u00a0it is also needed if you are using the WordPress mobile app. XML-RPC used to be disabled in the earlier versions but since WordPress version 3.5 it is enabled by default which allows for a greater attack surface on your site. Although various security researchers are advising that this is not that of a big deal, if you do not intend on using web-blog clients or the WP Mobile App,\u00a0you should disable the XML-RPC service.<\/p>\n<p>There are multiple ways to do this\u00a0and\u00a0the simplest would be to just install the\u00a0<a href=\"https:\/\/wordpress.org\/plugins\/disable-xml-rpc\/\">Disable XML-RPC<\/a> plugin.<\/p>\n<hr \/>\n<p>Of course, you don\u2019t have to secure your WordPress site if you use one of our <a href=\"https:\/\/www.rosehosting.com\/wordpress-hosting.html\">WordPress VPS Hosting services<\/a>, in which case you can simply ask our expert Linux admins to <strong>set up and secure your WordPress blog<\/strong>. They are available 24\u00d77 and will take care of your request immediately.<\/p>\n<p><strong>PS.<\/strong> If you liked this post, on how to\u00a0secure a WordPress site,\u00a0 please share it with your friends on the social networks using the sharing buttons or simply leave a reply below. Thanks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We&#8217;ll show you, How to Secure a WordPress Site. WordPress is by far the most popular blogging platform today. Being &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"How to Secure a WordPress Site\" class=\"read-more button\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#more-21213\" aria-label=\"Read more about How to Secure a WordPress Site\">Read More<\/a><\/p>\n","protected":false},"author":4,"featured_media":25119,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1710,1703,21],"tags":[65,148],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Secure a WordPress Site - RoseHosting<\/title>\n<meta name=\"description\" content=\"How to Secure a WordPress Site - RoseHosting\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Secure a WordPress Site - RoseHosting\" \/>\n<meta property=\"og:description\" content=\"How to Secure a WordPress Site - RoseHosting\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\" \/>\n<meta property=\"og:site_name\" content=\"RoseHosting\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/RoseHosting\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/rosehosting.helpdesk\" \/>\n<meta property=\"article:published_time\" content=\"2017-01-16T13:37:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-07T14:36:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jeff Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@rosehosting\" \/>\n<meta name=\"twitter:site\" content=\"@rosehosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\"},\"author\":{\"name\":\"Jeff Wilson\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713\"},\"headline\":\"How to Secure a WordPress Site\",\"datePublished\":\"2017-01-16T13:37:56+00:00\",\"dateModified\":\"2022-12-07T14:36:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\"},\"wordCount\":935,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg\",\"keywords\":[\"security\",\"wordpress\"],\"articleSection\":[\"CMS, CRM, ERP\",\"Security\",\"Tips and Tricks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\",\"name\":\"How to Secure a WordPress Site - RoseHosting\",\"isPartOf\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg\",\"datePublished\":\"2017-01-16T13:37:56+00:00\",\"dateModified\":\"2022-12-07T14:36:31+00:00\",\"description\":\"How to Secure a WordPress Site - RoseHosting\",\"breadcrumb\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg\",\"contentUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg\",\"width\":1200,\"height\":600,\"caption\":\"how to secure a wordpress site\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.rosehosting.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Secure a WordPress Site\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#website\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/\",\"name\":\"RoseHosting\",\"description\":\"Premium Linux Tutorials Since 2001\",\"publisher\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.rosehosting.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#organization\",\"name\":\"RoseHosting\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png\",\"contentUrl\":\"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png\",\"width\":192,\"height\":192,\"caption\":\"RoseHosting\"},\"image\":{\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/RoseHosting\",\"https:\/\/x.com\/rosehosting\",\"https:\/\/www.linkedin.com\/in\/rosehosting\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713\",\"name\":\"Jeff Wilson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g\",\"caption\":\"Jeff Wilson\"},\"description\":\"An experienced Linux veteran with many years of experience. Helping other Linux admins with frequent Linux and business-related blog posts on the RoseHosting blog. Techie by choice. Loving nature and travel. Happily married and father of two lovely children.\",\"sameAs\":[\"https:\/\/www.rosehosting.com\",\"https:\/\/www.facebook.com\/rosehosting.helpdesk\"],\"url\":\"https:\/\/www.rosehosting.com\/blog\/author\/jwilson\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Secure a WordPress Site - RoseHosting","description":"How to Secure a WordPress Site - RoseHosting","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/","og_locale":"en_US","og_type":"article","og_title":"How to Secure a WordPress Site - RoseHosting","og_description":"How to Secure a WordPress Site - RoseHosting","og_url":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/","og_site_name":"RoseHosting","article_publisher":"https:\/\/www.facebook.com\/RoseHosting","article_author":"https:\/\/www.facebook.com\/rosehosting.helpdesk","article_published_time":"2017-01-16T13:37:56+00:00","article_modified_time":"2022-12-07T14:36:31+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg","type":"image\/jpeg"}],"author":"Jeff Wilson","twitter_card":"summary_large_image","twitter_creator":"@rosehosting","twitter_site":"@rosehosting","twitter_misc":{"Written by":"Jeff Wilson","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#article","isPartOf":{"@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/"},"author":{"name":"Jeff Wilson","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713"},"headline":"How to Secure a WordPress Site","datePublished":"2017-01-16T13:37:56+00:00","dateModified":"2022-12-07T14:36:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/"},"wordCount":935,"commentCount":1,"publisher":{"@id":"https:\/\/www.rosehosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg","keywords":["security","wordpress"],"articleSection":["CMS, CRM, ERP","Security","Tips and Tricks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/","url":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/","name":"How to Secure a WordPress Site - RoseHosting","isPartOf":{"@id":"https:\/\/www.rosehosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg","datePublished":"2017-01-16T13:37:56+00:00","dateModified":"2022-12-07T14:36:31+00:00","description":"How to Secure a WordPress Site - RoseHosting","breadcrumb":{"@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#primaryimage","url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg","contentUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2017\/01\/how-to-secure-a-wordpress-site.jpg","width":1200,"height":600,"caption":"how to secure a wordpress site"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosehosting.com\/blog\/5-tips-for-securing-your-wordpress-sites\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rosehosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Secure a WordPress Site"}]},{"@type":"WebSite","@id":"https:\/\/www.rosehosting.com\/blog\/#website","url":"https:\/\/www.rosehosting.com\/blog\/","name":"RoseHosting","description":"Premium Linux Tutorials Since 2001","publisher":{"@id":"https:\/\/www.rosehosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosehosting.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosehosting.com\/blog\/#organization","name":"RoseHosting","url":"https:\/\/www.rosehosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png","contentUrl":"https:\/\/www.rosehosting.com\/blog\/wp-content\/uploads\/2022\/03\/android-chrome-192x192-1.png","width":192,"height":192,"caption":"RoseHosting"},"image":{"@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/RoseHosting","https:\/\/x.com\/rosehosting","https:\/\/www.linkedin.com\/in\/rosehosting\/"]},{"@type":"Person","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/7ce77a842fa6a9a7f8efa186f2353713","name":"Jeff Wilson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosehosting.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09271207587f897ab46faaed9b355252?s=96&r=g","caption":"Jeff Wilson"},"description":"An experienced Linux veteran with many years of experience. Helping other Linux admins with frequent Linux and business-related blog posts on the RoseHosting blog. Techie by choice. Loving nature and travel. Happily married and father of two lovely children.","sameAs":["https:\/\/www.rosehosting.com","https:\/\/www.facebook.com\/rosehosting.helpdesk"],"url":"https:\/\/www.rosehosting.com\/blog\/author\/jwilson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/21213"}],"collection":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/comments?post=21213"}],"version-history":[{"count":3,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/21213\/revisions"}],"predecessor-version":[{"id":43748,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/posts\/21213\/revisions\/43748"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/media\/25119"}],"wp:attachment":[{"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/media?parent=21213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/categories?post=21213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosehosting.com\/blog\/wp-json\/wp\/v2\/tags?post=21213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}