General Tips

Backup your website

Always backup your website including database, before installing plugins or add-ons to your site.

Website Login

Use a unique username and password for login.

Verify the user as a human

Hackers use botnets to attack systems with brute force. And, one way of really giving trouble to hackers is by using a re-CAPTCHA form.

Limit login attempts & brute force attack protection

Limiting login attempts is a great way of protecting your website from brute force attacks. Hackers use Brute Force attacks to gain access to the admin panel or FTP accounts of your website. Basically, brute force attack is a trial and error method. It’s like trying different key combinations to open a lock. Intruders can use botnets to automate the attacks. You can also change the default login URL (www.yourwebsite.com/wp-admin) so that hackers have a hard time finding login form in the first place.

Secure .htaccess and wp-content.php

You should always hide .htaccess and wp-content.php file. Even if you don’t know how to code, you can easily secure .htaccess and wp-content.php by inserting some codes in the .htaccess file. Also, keep a backup of the .htaccess file before making changes to it.

Delete Unused Photos From The Media Library

One of the easiest ways to unload storage space and keep your site running at its best is to delete all of your unused files and images. From the WordPress dashboard, go to Media > Library. To delete a single image, click it, then choose the Delete Permanently option at the bottom of the screen:

A popup will appear on screen. Clicking OK will remove the file from your Media Library.You can also bulk delete files and images, which is a quicker way of managing unused files. From the Media Library page, click Bulk Select at the top:

Click on all files you’d like to delete, and choose Delete Selected. A popup will appear and, just like above, click OK to permanently remove these images: