Securing your WordPress site in 5 easy pieces

•

3 likes•995 views

Kevin Koehler

Flash talk for WordPress DC meetup, August 2015

Technology

Securing your WordPress

site in 5 easy pieces
Kevin Koehler
@kev097

I am not a

security expert.
And so can you!

1. Good password hygiene
Very long, very random
Ph’nglui mglw’nafh Cthulhu R’lyeh wgah’nagl fhtagn1
XKCD.com/936
Password managers, yay!
Don’t share
Two-Step Authentication
With people or services
1Password, LastPass
Google Authenticator, Duo

2. UPDATE!
“Minor” releases = majorly important
4.2.4
Auto-update is your friend

3. Choose solid partners
Responsive, active in the community
Frequent updates
WordPress.org directory 👍
Beware dirt cheap hosts
Too good to be true?
(themes, plugins, hosts)
Popular

4-5. Scan & backup
Jetpack - Protect
Sucuri
VaultPress
BackUpWordPress
·

Thanks!
Tweet @kev097
Email kev@automattic.com
Extra credit
Hardening WordPress
http://codex.wordpress.org/Hardening_WordPress
Security white paper
https://wordpress.org/about/security/

What's hot

WordPress Security BasicsRyan Plas

Identifying a Compromised WordPress SiteChris Burgess

Keep Your SIte SecureMichele Butcher-Jones

Building Secure WordPress Sites Catch Themes

WordPress Security Implementation Guideline - Presentation for OWASP Romania ...Dan Vasile

Dan Catalin Vasile - Hacking the Wordpress EcosystemDan Vasile

Dan Catalin Vasile - Defcamp2013 - Does it pay to be a blackhat hackerDan Vasile

WordCamp North Canton - WordPress & PodcastingDustin Hartzler

WordPress Server SecurityPeter Baylies

2010 11 pubcon_hendison-hostingshendison

Tìm hiểu Wordpress shortcodeLương Bá Hợp

Head Slapping WordPress SecurityChris Burgess

WordPress SecuritySuzette Franck

WordPress and the EnterprisePrasad Ajinkya

What I learned about SEO (while building a WordPress Theme)David Zimmerman

WebHosting Performance / WordPress - Pubcon Vegas - HendisonSearch Commander, Inc.

WordPress security & performance a beginners guideMickey Mellen

Sucuri Webinar: How to Optimize Your Website for Best PerformanceSucuri

Word press security basicsEast Bay WordPress Meetup

MWUG wp-mythsMike Little

What's hot (20)

WordPress Security Basics

Identifying a Compromised WordPress Site

Keep Your SIte Secure

Building Secure WordPress Sites

WordPress Security Implementation Guideline - Presentation for OWASP Romania ...

Dan Catalin Vasile - Hacking the Wordpress Ecosystem

Dan Catalin Vasile - Defcamp2013 - Does it pay to be a blackhat hacker

WordCamp North Canton - WordPress & Podcasting

WordPress Server Security

2010 11 pubcon_hendison-hosting

Tìm hiểu Wordpress shortcode

Head Slapping WordPress Security

WordPress Security

WordPress and the Enterprise

What I learned about SEO (while building a WordPress Theme)

WebHosting Performance / WordPress - Pubcon Vegas - Hendison

WordPress security & performance a beginners guide

Sucuri Webinar: How to Optimize Your Website for Best Performance

Word press security basics

MWUG wp-myths

Similar to Securing your WordPress site in 5 easy pieces

WordPress Plugins and SecurityThink Media Inc.

Top Ten WordPress Security Tips for 2012Brad Williams

Protect Your WordPress From The Inside OutSiteGround.com

WordPress End-User SecurityDre Armeda

WordPress Security Best PracticesZero Point Development

Security 101Michele Butcher-Jones

I Have My WordPress Site Now What?Michele Butcher-Jones

WordPress Security - 12 WordPress Security Fundamentalsfindingsimple

Responsible [digital] Home OwnershipDenise (Dee) Teal

WordPress SecurityBrad Williams

INTERNET SAFETY FOR KIDSCamille Hazellie

Simple word press security tricks to keep your website secureSeo Brainmine

Professional WordPress Security: Beyond Security PluginsChris Burgess

WordPress Security Best PracticesZero Point Development

Presentation to SAIT Students - Dec 2013Think Media Inc.

WordPress Security Essential Tips & TricksFaraz Ahmed

Beginning WordPress Security WordCamp North Canton 2015Michele Butcher-Jones

WordPress Security Best Practices 2019 UpdateZero Point Development

WordPress Security Essentials WordCamp Denver 2012Angela Bowman

10 tips to improve your website securitySucuri

Similar to Securing your WordPress site in 5 easy pieces (20)

WordPress Plugins and Security

Top Ten WordPress Security Tips for 2012

Protect Your WordPress From The Inside Out

WordPress End-User Security

WordPress Security Best Practices

Security 101

I Have My WordPress Site Now What?

WordPress Security - 12 WordPress Security Fundamentals

Responsible [digital] Home Ownership

WordPress Security

INTERNET SAFETY FOR KIDS

Simple word press security tricks to keep your website secure

Professional WordPress Security: Beyond Security Plugins

WordPress Security Best Practices

Presentation to SAIT Students - Dec 2013

WordPress Security Essential Tips & Tricks

Beginning WordPress Security WordCamp North Canton 2015

WordPress Security Best Practices 2019 Update

WordPress Security Essentials WordCamp Denver 2012

10 tips to improve your website security

Recently uploaded

Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationSafe Software

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Patryk Bandurski

My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 3652toLead Limited

The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticscarlostorres15106

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

How to convert PDF to text with Nanonetsnaman860154

Human Factors of XR: Using Human Factors to Design XR SystemsMark Billinghurst

Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...Neo4j

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix

Understanding the Laravel MVC ArchitecturePixlogix Infotech

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

A Domino Admins Adventures (Engage 2024)Gabriella Davis

Pigging Solutions Piggable Sweeping ElbowsPigging Solutions

Azure Monitor & Application Insight to monitor Infrastructure & ApplicationAndikSusilo4

Scaling API-first – The story of a global engineering organizationRadu Cotescu

Benefits Of Flutter Compared To Other FrameworksSoftradix Technologies

Recently uploaded (20)

Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...

My Hashitalk Indonesia April 2024 Presentation

The Codex of Business Writing Software for Real-World Solutions 2.pptx

Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmatics

08448380779 Call Girls In Civil Lines Women Seeking Men

How to convert PDF to text with Nanonets

Human Factors of XR: Using Human Factors to Design XR Systems

Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...

Factors to Consider When Choosing Accounts Payable Services Providers.pptx

Swan(sea) Song – personal research during my six years at Swansea ... and bey...

Understanding the Laravel MVC Architecture

Unblocking The Main Thread Solving ANRs and Frozen Frames

A Domino Admins Adventures (Engage 2024)

Pigging Solutions Piggable Sweeping Elbows

Azure Monitor & Application Insight to monitor Infrastructure & Application

Scaling API-first – The story of a global engineering organization

Benefits Of Flutter Compared To Other Frameworks

Securing your WordPress site in 5 easy pieces

1. Securing your WordPress site in 5 easy pieces Kevin Koehler @kev097

2. I am not a security expert. And so can you!

3. PIECE 1 Good password hygiene

5. 1. Good password hygiene Very long, very random Ph’nglui mglw’nafh Cthulhu R’lyeh wgah’nagl fhtagn1 XKCD.com/936 Password managers, yay! Don’t share Two-Step Authentication With people or services 1Password, LastPass Google Authenticator, Duo

6. PIECE 2 UPDATE!

7. 2. UPDATE! “Minor” releases = majorly important 4.2.4 Auto-update is your friend

8. PIECE 3 Choose solid partners

9. 3. Choose solid partners Responsive, active in the community Frequent updates WordPress.org directory 👍 Beware dirt cheap hosts Too good to be true? (themes, plugins, hosts) Popular

10. PIECE 4-5 Scan & backup

11. 4-5. Scan & backup Jetpack - Protect Sucuri VaultPress BackUpWordPress ·

12. Thanks! Tweet @kev097 Email kev@automattic.com Extra credit Hardening WordPress http://codex.wordpress.org/Hardening_WordPress Security white paper https://wordpress.org/about/security/

Securing your WordPress site in 5 easy pieces

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Securing your WordPress site in 5 easy pieces

Similar to Securing your WordPress site in 5 easy pieces (20)

Recently uploaded

Recently uploaded (20)

Securing your WordPress site in 5 easy pieces