WordPress

WordPress Security Hardening Checklist

Follow this checklist to secure your WordPress website against common attacks.

WordPress security checklist:

  1. Update WordPress core, plugins, and themes
  2. Use strong admin passwords
  3. Limit login attempts
  4. Disable file editing in wp-config.php
  5. Move wp-config.php outside web root
  6. Use SSL/HTTPS
  7. Install a security plugin
  8. Regular backups
  9. Remove unused plugins and themes
  10. Use a WAF (Web Application Firewall)

Was this article helpful?

Related Articles
How to Move wp-config.php for Security

Check if your site has this issue

Our free scan covers this and 40 more checks — no signup to start.

Start Free Scan