Practical WordPress Security

General slide deck for my practical security talk, which has been done as part of the 34SP.com Road Trip of WordPress usergroups in 2017

Transcript

1. Practical Security Tips @tnash
3. What is security?
4. Fighting drive by hacks
5. Installing a plugin
6. User Roles/Permissions
7. PassPhrases
9. Password Manager
10. Two Factor Authentication
12. Limit Logins
13. Update WordPress Core
14. Update Plugins
15. Update themes (meet a child theme)
16. Repeat after me - “I will not buy themes with un- updatable plugins”
17. Buy from reputable sources
18. Monitoring
19. File Permissions
20. Locking down uploads
21. HTTPS://everything
22. Good hosting
23. TRUST ME “I work in hosting”
24. Have a disaster recovery plan
25. Two-Factor Plugin Keepass (MacPass) PassPhrases 34SP.com Hosting Visual Ping uptown.io Let’s Encrypt What I use…
26. Photo credits: Tim Nash Siobhan Hancock Daniel Foster David Goehring Gratisography Negativespace unsplash Caio xkcd comicvine.com Christopher Geary
 Mary Alex
27. WordPress Hosting Experts
28. Tim Nash @tnash timnash.co.uk @34SP
 34SP.com