Securing your WordPress blog in less than 5 minutes

April 12, 2010 19:53 pm by Jal

Security of your blog and thereby your hard work is extremely important. Like all web 2.0 systems, WordPress too is susceptible to attacks. I guess you already know how much important it is to have a robust security for your online content. Here is a quick tutorial to secure your WordPress blog in less than 5 minutes.

First, get a FTP client like FileZilla and configure it with your WordPress blog.

Changing Permissions

This is the most primitive yet effective solution. Once you have setup your blog with the FTP client, you now have to change the permissions of certain folders in it. If you are using FileZilla, you can do this by just right clicking the folder and selecting ‘File Attributes

Changing folder permissions

Now you need to put in some numeric value (shown by an arrow in the above picture) for the different folders.

Folder Numeric value
Root folder (usually public_html) 755
wp-admin/index.php 644
wp-admin/js/ 755
wp-content 755
wp-content/themes/ 755
wp-content/plugins/ 755
wp-includes 755
.htaccess 644

 

Using empty HTML to hide plugins

Make an empty HTML file, call it ‘index.html’ and place it in wp-content/plugins folder. This will prevent listing of plug-ins you are using on your blog.

Using Login Lockdown & WP Security Scan plugins

Download and install Login Lockdown plugin. This will lock your administrator login for a definite amount of time after a predefined number of failed login attempts. Simple yet highly effective.

Also, download and install WP Security Scan plugin. This plugin will scan for any security loop holes in your wordpress installation and will help you rectify them.

Strong password with these characteristics

Finally choose your WordPress administrator password wisely. Make sure you includes ALL of the below parameters:

» 8 characters long.

» Must include a combination of uppercase and lowercase characters.

» Must include special characters (!, @, #, $, %).

» Must include a number.

» Must not be dictionary word.

» Must not include information related to you. For eg. your birth date, your car number, your middle name, etc.

So these are some quick security measures to ensure a considerable amount of protection. If you too have come across a nice security tip for WordPress blogs, do share here.

Subscribe to TechExplorer, today! You must follow us on Twitter
Advertise here
Post comment as twitter logo facebook logo
Sort: Newest | Oldest

Generally I do not post on blogs, but I would like to say that this post really forced me to do so, Excellent post!

I liked the changing permissions thing. It's probably the most secured of the lot

Hey cool tips there. Thanks!