Website Security Checklist – 9 Simple Points

Website security is of the utmost importance to your business.

April 8, 2021

Hackers are a serious threat! Don’t I know! Thank goodness my business website has not been hacked (knock on wood!), but when I was at my government job our whole network system experienced a Ransom Cyber Attack. And it was BAD!!

We were down for more than 2 months and it took a few more months to completely recover. It all started with an unsuspecting employee opening an email “xlsm” file with a destructive virus. What a NIGHTMARE!

Guess what? Hackers have been trying to hack your site today. More than likely, they tried to hack your site several times today. Obviously, you cannot afford to have this happen. I am going to share with you 9 simple ways to help keep your site secure.

First And Foremost, You Want To Choose Your Host Wisely.

I highly recommend Bluehost or Siteground. Why?

• Awesome Customer Service – time is of the essence when your site has crashed.
• Free SSL – best indicator for visitors of a secure website
• 24/7 Monitoring and Updating of Network Servers

Related Articles:

• How to Blog with Bluehost – Ready, Set, Let’s Blog
• How to Start a Money Making Blog with Bluehost – Create Your Blog in 12 Easy Steps

Second, You Want To Choose A Premium Theme.

Although you may not want to spend the money, this is where you should invest in your business as soon as you can. You DO NOT want a Free Theme. You get what you pay for! Free themes are not coded well, not updated as needed, and not as functional as a Premium Theme.

Let’s be real, Free Themes are not money makers so the coding is not up to par. Because everyone eventually purchases a Premium Theme, it’s easier to do it sooner rather than later and having to go through the hassle of transfering all your content. Do yourself a favor and invest in a quality theme.

My theme of choice is Divi by Elegant Themes. Divi offers a library of over 200 layouts to choose from, but I personally like to build my own. Either way, you can create a beautiful and professional looking website.

Other great places to purchase premium themes are Bluchic, CyberChimps, and Themeforest.

Re-Evaluate Your Username And Password

Securing an effective Username and Password is so often overlooked for the sake of convenience.

When setting up your website, the default Username is Admin or something similar. The first thing you should do is change that immediately. Other Usernames you should NEVER use are:

• Your name, your child’s name, your dog’s name – get the picture?
• The name of your site
• Your email address

Since hackers are testing your site 24/7 (they are up around the clock and from all over the world) and the Username is half of the puzzle to access it, why would you hand them that on a silver platter? Instead, choose something out of the ordinary that you can remember – B@dA$$-Bl0gger or even better I@@Ab19!83 (the first letter of each word in the phrase I am an awesome blogger with a significant year to remember and a symbol in between).

I know. I know. WordPress tells you that you cannot change your username. I can change it for you for FREE in just a few minutes.  Shoot me an email at hello@uptowndowntowngal and put Change Username in the subject line. I will get back with you shortly.

Your Password should be even harder to figure out! Once again NEVER use your child’s name, your pet’s name, a family nickname, or anything easily guessed. Use the same example as the Password. Make it hard to hack, but easy to remember.

You should consider changing your password often for extra security.

Keep Your User Info Up To Date

Although you may trust people, it is always better to be on the safe side. You should delete users as soon as you know they no longer need an account. Monthly or quarterly audits should also be done to keep this information up to date.

Install A Highly Rated Security Plugin

A plugin is software that allows additional function on your site without having to create or insert code yourself. Security Plugins reduce risk by checking for vulnerabilities, preventing certain addresses from accessing your account, blocking countries that are known for a lot of hacking, and alerting you of bot activity and multiple login attempts.

If you have a new site with not much activity, you can probably get away with one of the free security plugins. I have had great experience with WordFence. You can also check out All In One WP Security that some of my colleagues say is pretty good too.

After you’ve had your site for a while, added quite a bit of content, and are making money, you will want to upgrade to a premium security package. WordFence Premium Security and Securi Scanner are both great options and fairly easy to install.

Because the security of your site is very important, do your research and choose the premium plan that best suits your needs. A couple hundred dollars spent now on security is money put to good use. I guarantee you do not want to find out what it costs to clean a hacked site, on top of the revenue you will lose while your site is down.

Backup! Backup! Backup! What Was That?? BACKUP Your Site Regularly!

Always have a backup. Many hosting companies do backups, but, more than likely, you need more than they provide. For that reason, I purchased a premium package that includes regular backups. And, just for my own piece of mind, I use the FREE version of UpdraftPlus. I figure it’s better to be safe, than sorry.

Keep Your Site Updated

Make certain you have the most current version for your hosting, theme, and plugins. If possible, go to your settings and enable automatic updating. Do not ignore notifications for updates; it may be an update fix for a security issue.

Keep Your Site Free Of Spam

Remove all spam comments. I use the Akismet FREE plugin to catch most of them. I also set all comments to be approved prior to being made public. This way I can get rid of all spam and inappropriate junk immediately.

Remove All Unused Plugins, Themes, And Anything You Are Not Currently Using.

Developers sometimes abandon an old plugin. These are a hackers dream and can be used as a backdoor to access your site. If a plugin has not been updated in many months, beware, you DO NOT want it on your site! WordFence alerts you of potentially abandoned plugins.Always remove unwanted junk themes that WordPress puts on your site automatically. Another backdoor for hackers. You have no use for them and they have no business being there taking up valuable space.

Now is a good time to PIN this post, so you can refer back to it at any time. Choose your Pin Image below.

In Conclusion

Everyone thinks it won't happen to them, until it does! You may not think it's worth the effort, but I personally feel it is better to be safe than sorry. Make the extra effort to keep your site protected.

Related Articles:

• Start Your Six-Figure Blog with Bluehost – Create Your Blog in 12 Easy Steps

Let me know how these tips work for you in the comment section below.

 I invite you to follow me on Facebook and Pinterest. If you find this information useful, please share with your family and friends.

Your Girlfriend,