A friend who had his WordPress site hacked (and no backups) asked me about securing his blog. So I could either take 20 minutes to explain the process, or record an 8 minute video to show the steps.
Enjoy my 8 minute video.
There are the very first things I do to secure all of my WordPress sites right after they are installed. I use two plugins to set this up.
- All In One WP Security and Firewall – https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/
- UpdraftPlus – https://wordpress.org/plugins/updraftplus/
They are free and you can download them straight from your WordPress site.
I also recommend you get an Amazon S3 account to store your backups “off-site” as it were. That way if anything happens to your hosting account, you have the backups elsewhere.
One thing I left out – I always run backups on productions sites before installing update.