walangalam2
Junior Member
- Mar 3, 2022
- 100
- 41
I'm already using Cloudflare and I changed the login page. Any additional tips would be appreciated.
Any advice how to protect a Wordpress website from hackers and DDOS attacK?
- Thread starter walangalam2
- Start date
walangalam2
Junior Member
- Mar 3, 2022
- 100
- 41
What is rate limiting? I'll check it out
rate limiting is a mechanism which limits the amount of request sent from one single IP addres during a certain period of time. I find that rate limiting work vry effectively against brute force attacks.
Raisarahimah
Newbie
- Sep 15, 2023
- 41
- 15
Keep wordpress themes & plugins fully updated, remove anything unused & use strong unique passwords with 2fa also enable cloudflare waf/rate limiting, keep reliable off site backups & monitor login activity, changing the login url alone isn's enough
milles
Registered Member
- Jul 1, 2026
- 83
- 50
this is gud information, however, there's another side to it. I would also suggest that u look into your settings for XML-RPC, enable 2FA, and use backups that are off the server.
VikramAditya007
Junior Member
- Mar 15, 2024
- 103
- 47
For maximum WordPress security, set up a firewall (WAF) in Cloudflare, enable two-factor authentication in the admin panel, disable PHP scripts in the uploads folder, and update all plugins regularly.
lindarose2026
Newbie
- Jul 9, 2026
- 29
- 9
Yes enable 2FA, rate limiting, keep everything updated, and protect your original IP. Changing the login page alone isn’t enough.
JessicaBrown23
Newbie
- Jun 12, 2026
- 43
- 13
changing the login URL will help to some extent, but it is definitely not a comprehensive security measure, imo. 2FA, disabling xml-rpc where not required, and maintaining regular offsite backups are of higher priority here.