Uncover the Hidden Security Flaws That Could Destroy Your Website—And 22 Expert Tips to Stop Hackers Now!
WordPress.com includes CDN functionality powered by more than 28 data centers across six continents.
8. Force strong usernames and passwords
Weak login credentials are one of the most common ways hackers gain access to websites.
Here are some best practices to prevent that from happening:
- Avoid predictable usernames like “admin” or “user.”
- Use strong passwords with a mix of letters, numbers, and symbols for all entry points to your website, including your FTP, database, and hosting account. You can generate them with the help of a password generator.
- Require the same for all users with access to your site, if necessary with a plugin like Password Policy Manager.
- Consider using separate accounts for site administration and content creation, so as not to display the admin username on your site.
- Be sure to balance safety and usability.
To keep your login pages safe, WordPress.com offers out-of-the-box brute force protection and single sign-on (SSO).
