5 Hacks to Improve Wordpress Security in Blogs

I have covered wordpress alot in the past month specially on security with posts like 3 best Wordpress Security Plugins and increase wordpress blog performance.

Here are 5 Tips on making your wordpress blog more secure with these hacks -

1. Keep the wordpress uptodate - Sounds trviial ? but believe me, most of wordpress blogs which get hacked are running on older version of wordpress. Most of the bloggers are just lazy to not upgrade their wp installation for some reason which only takes few minutes. I will highly advice you to keep the wordpress plugins uptodate too.

2. From the crudest hacker to the most sophisticated computers, the brute force method is considered as the most effective way to break a password. Install the Login Lock Down plugin to ensure brute force attacks cannot succeed due to locking of the log in process. This plug in automatically blocks any account where multiple attempts to access the account using a wrong password has taken place. The account remains blocked for a fixed duration (the default option is one hour).

3. Avoid the folder code 777 if you are using Wordpress. Choose 755 for folders and 644 for all files. Folder code 777 will result in total and unrestricted access to all users. This unnecessarily increases risk of insertion of malicious code. Many host have different settings and sometimes 755 don’t work so eventually you have to use 777, talk to your host to get the settings right (specially if you are running a popular blog which are more prone to such hacking)

4. Removing the wp- table prefix from the site reduces risk of SQL injection and increases the safety and security of the site. Even changing this prefix is enough to drastically lower your risk of SQL injections.

5. Finally, create new admin account and delete the default admin account provided by Wordpress before transferring all permissions to this new account. By doing this, you are reducing the chances of someone hacking into your admin login as this time the hacker has to find both admin login and password. Also keep the posting alias different then the login name.

So these were 5 tips and hacks on making your wordpress blog more secure. If you know more such tips and tricks then please tell them as comments which are dofollow.

Related posts:

  1. 3 Best Wordpress Security Plugins As long as your wordpress files are up to date...
  2. 5 Advanced SEO Tips for Wordpress Blogs First of all, if you have not read this post...
  3. Reset Wordpress Password using PhpMyAdmin and Mysql Today somehow MWolk Blog which runs on wordpress stopped accepting...
  4. Forum Plugin for Wordpress Blogs If you owns a popular wordpress blog which gets lot...
  5. Move Wordpress Blog from Subfolder to Root folder If you are looking to move your wordpress blog from...


Liked this post ? Subscribe to MWolk Blog via RSS Feed or via Email and receive free daily Tech and Money making tips.

2 Responses to “5 Hacks to Improve Wordpress Security in Blogs”

  1. 1Kriss on May 23, 2009 :

    Nice post and blog :)
    I like number 4, so have a lot of work with my wordpresses :) Thnx a lot.

    1. another login for administrator, another login for post editor
    2. password min. 8 characters (letters, numbers and @#$#@#$%)

    Nomad’s last blog post..Wordpress 2.8 BETA 1 wydany

  2. 22base tl on Jan 7, 2010 :

    I found your blog on google and read a few of your other posts. I just added you to my Google News Reader. Keep up the good work Look forward to reading more from you in the future.

Leave a Reply

Name Email Website URI