How can i secure my wordpress site from hackers? help me

[hims.000]

Hi, I hate using plugin.

Can you help me how can i secure my WordPress site from hackers??

Is it possible without Installing extra plugin?

 

[Ababba2]

just don't use pirated plugins/themes and getting hacked should be really uncommon

if by hackers you mean DDoS, then you need to use cloudflare, you can't fix by your own

 

[hims.000]

just don't use pirated plugins/themes and getting hacked should be really uncommon

if by hackers you mean DDoS, then you need to use cloudflare, you can't fix by your othmms

just don't use pirated plugins/themes and getting hacked should be really uncommon

if by hackers you mean DDoS, then you need to use cloudflare, you can't fix by your own

Thnks

 

[pankajjangir]

Check this: https://10alert.com/how-to-use-cloudflare-to-secure-your-wordpress-site/ (not my web)

Use IP block for wp-login.php, wp-admin, wp-comments-post.php

These settings will not allow other to access these pages without your permission.

 

[ManageManga]

1. Use a Web-based WAF, Cloudflare etc..
2. Install Wordfence
3. Do not install a lot of random plugins + any pirated plugins

 

[hims.000]

1. Use a Web-based WAF, Cloudflare etc..
2. Install Wordfence
3. Do not install a lot of random plugins + any pirated plugins

Does wordfence slow WordPress loading??

 

[ManageManga]

Does wordfence slow WordPress loading??

No, been using it on my every website. and the speed is awesome
Here's a screenshot from my latest website:

Also the full way to secure wp is this:
1. Use a WAF quic cloud or cloudflare, my personal fav is quic cloud
2. Install Wordfence, activate 2FA as well
3. Do not install any un-necessary plugins or themes
4. Do not install any pirated theme/plugin
5. Delete xmlrpc.php from your wordpress folder in cpanel or whatever panel you are using (jetpack wont work without this though but anyway jetpack in itself is crap)
6. Hide wp login using WPS hide login
None of these slow down your website but only protect it

 

[fd55]

Bear in mind that nothing is a 100%, however the steps mentioned above are usually best practices. Other things not mentioned so far is probably block as needed in htaccess, 2fa login if this is your main site, change folder permissions, and above all else...... make backups frequently.

As far as plugins; be wary of what plugins you do use. Plugins sometimes get compromised themselves or go rogue.

 

[GenesisOne]

If your site is important to you $$$, use paid wordfence to have a nice sleep.