Skip to Content

WordPress security and backup

Video

If you open the video on Youtube, you can find the chapters of the different settings in the description.

WordPress is the biggest system for making websites in the world. Therefore, it gets attacked the most. And even though you might think that nobody wants to hack you, your website can send e-mails and that’s what they are after. So, please, secure your website with a security plugin and regularly create a backup.

Creating a backup with Duplicator

If you install the plugin Duplicator, creating a complete backup of your website is super easy, just create a package and download both of the files – the zip file and installer.php file. To recover the backup, you would need to connect to your FTP, ideally, you would never have to do this, if you do, please find some tutorial, I am sure there are plenty.

https://wordpress.org/plugins/duplicator

Securing your website with security plugin

I personally prefer the All in one security plugin, but I also have experience with Wordfence. Wordfence is easier to set up, but then sends you annoying e-mails all the time. In the All in one, just simply install, and then click on everything you could, especially the firewall, database security etc. I would also strongly recommend to change the url of your WordPress login, that is done in the brute force. So just click this option, put some word in there, f.e. my-login, and save.

https://cs.wordpress.org/plugins/all-in-one-wp-security-and-firewall

Transcription of the video

Now, let’s talk about the necessary plugins for WordPress websites, especially for security. Many people think their website wouldn’t be a target, but in reality, automated bots often attack websites to exploit their ability to send emails. Since WordPress is the most popular CMS, it’s also the most targeted.

One critical step before adding security plugins is creating a backup of your site. I recommend the Duplicator plugin. You can easily create a backup by navigating to ‘Duplicator’ > ‘Backups’ and creating a new package. Download the ZIP and installer files and store them safely. Restoring a backup might require FTP access, but there are many tutorials available.

When it comes to security plugins, I recommend ‘All In One Security’ or ‘Wordfence Security’. Personally, I prefer All In One Security because it doesn’t send too many emails. One of the most important features is the brute force protection, which allows you to change the WordPress login URL from the default ‘/wp-admin’ to something unique. This simple change significantly increases your site’s security. Additionally, I recommend enabling all possible security features, particularly the firewall and database security options. Just go through the plugin settings and enable everything that applies to your site.

That’s it! Implementing these plugins and settings will help secure your WordPress website and give you peace of mind. Thanks for watching!