Securing your Wordpress Sites

At WordCamp Nagpur - 2017, I spoke on a few ways you can secure your wordpress site.

Transcript

2. SECURING YOUR WORDPRESS SITES KARTHIK RAGUBATHY
3. IF YOU THINK TECHNOLOGY CAN SOLVE YOUR SECURITY PROBLEM - THEN YOU DON’T UNDERSTAND THE PROBLEM AND THE TECHNOLOGY Bruce Schneier
4. HARDENING WORDPRESS
5. UPDATE WORDPRESS
6. BACKUP ON A SCHEDULE RESTORE ON A SCHEDULE
7. DISABLE THE PLUGIN / THEME EDITOR
8. CUT DOWN ON YOUR PLUGINS / THEMES
9. ADD TWO STEP AUTHENTICATION
10. REMOVE THE ‘ADMIN’ USER
11. READ YOUR LOGS
12. CHANGE THE DEFAULTS
13. HIRE A RELIABLE HOSTING PROVIDER
14. INSTALL SSL ON YOUR SITE
15. SECURE YOUR COMPUTER
16. FOLLOW THE OWASP CHECKLIST https://www.owasp.org/index.php/ OWASP_Wordpress_Security_Implementation_Guideline
17. TAKEAWAYS ▸ Security is a process. Always be securing. ▸ Always update Wordpress / Plugins / Themes. ▸ Add Two Factor Authentication ▸ Keep your work environment secure ▸ Use SSL certificates to secure your site ▸ Keep an OWASP Checklist ▸ Manage access and check logs regularly
18. DID I MISS ANYTHING? QUESTIONS Email : me@pkarthik.in Twitter : @pkarthikr