Darrel Wilson Please Answer:- 1) Please make a video comparing Wordfence , WPCerber, Sucuri from non techie point of view. Which one is easiest to use ? Example if there is an attack a non techie can get clean up from Sucuri expert so does this really help Non-techie? Are other plugins useful for Non-technical people (Cerber/wordfence)? Because not everyone can understand weather the code is malicious or not & they may delete essential files. Use paid plugin features for comparison if possible. Please make a video for WPCerber security plugin 2)Although you might say its not necessary but i want to know; Will there be a problem if I use paid Sucuri + WPCerber both in 1 website?
What's wrong with GDPR? As I understand it, GDPR aims to protect people from 'unilateral' data harvesting. How does that relate to communism? In fact, it sounds like the exact opposite of.
I have quite successfully implemented another kind of fully automatic anti-brute force detection sysem, which is dependant on how many times you try to log in with the wrong pass word. So, it is a very basic idea, the first time you use the wrong password, you have to wait 1 second to log in again. Next time, if you try to log in within that second with a wrong password, you have to wait 2 seconds, then 4 seconds, then 8 seconds and you can see how this will lead very quickly to almost infine (which is why my limit is 2^8 seconds). Then, you want to make sure that there is some way to escape it if you are a legit user, so the last IP which successfully logged in to the page is stored on the server and it will be possible for that IP to use wrong pass word without waiting. I haven't impemented the banning of a user for wrong log in after a certain amount of times, because I find it quite annoying, but that is easy to implement. Now, one last thing you need to do is, you only want to show the login form to users which has GZIP in the Accept-Encoding, and the reason for this is, all real users have that in that field, while many bots do not. So it's a very simple human verification. It will let some bots in, but it will keep out zero humans.
Loved the video but I have a suggestion. Remember that the rules you set for other visitors, apply to you as well. If you mistype you login name you may also be logged out for the specified time too. I logged myself out and learned the hard way. Except your IP from this rule.
I don’t know why, but for some reason Wordfence broke my site. Maybe because it was last updated 1 month ago. Learned how to deactivate the plugin thanks to my host’s customer support. I learned one other thing. Always log which plugins you update. Thought it’d be good to share this info in case someone else runs into the same issue. 😊👍
Recently, I just worried about the security of my website. however, I found your video ! I'm thankful for your tutorial about building-website knowledge.
Great highlight video Big D as indeed the most important issue period in WordPress. 7 yrs after starting my web design biz this still yes the best goto security plugin for self and clients. 💪🏻⚡️👊🏻🖥💻📱💥⚡️🙌🏻 #priceless
Darrel, another great video from one of the 3 guru's of WP. You, Ferdy and Nayyar! Can I ask in your opinion which security plugin is best seeing as you have reviewed both. Wordfence or iThemes? I know that you have said iThemes is 2nd in this video. But thought I'd check to make sure your opinions have not changed. Many Thanks.
Epic video, got hacked few times before started using Wordfence, my client was like, why is my page on Japanese language (we are in Croatia) As alway thank you for tutorial 😁!
Wordfence has a really good scanner, but once you have malware their support is really expensive. Right now it's $322 per site due to high demand. While Sucuri offers their package for $200/year which includes removal. I would recommend getting Sucuri instead and it's less server heavy as they do offsite checks.
Very nice tutorial on WP security! I want to know how to check if the files marked in the scan as critical should be deleted or not? as i see some file related to Installatron codes which could be part of wordpress plugin or theme. Being a non coder how to decide whether to delete or not?
Thank God! The Moroccan person is not a Hacker! 😆 I really hate hackers! Handreds a day trying to hack my website! Why does hackers do it? Instead they could create a website and work on their own instead of wasting their time hacking, if they succeed, it's so bad! 🤬
Today wordpress websites are the number target for hackers. Make sure update the plugins to the latest version.use complicated passwords. So stay updated. I am using another security plugin. It is good. Wordfence is another good one.
why the block google fake crawlers was gone ?? If the plugin test suggested litespeed while hosting suggested apache+mod..... should I do it manually? Many thx !
hey , Using Wordfence and Cloudflare together can provide complementary security features. Cloudflare offers CDN and firewall protection at the network level, while Wordfence provides more detailed WordPress-specific security measures like malware scanning and login protection. Using both can enhance your site's security, but ensure there's no redundancy or conflicts between their settings to avoid performance issues or false positives.
Wordfence is using too much CPU and was really bad this plugin is not that good as resalt. Ones removed everything was fine again. So I am using ithemes-security-pro and that works much better than this and it does not hit my server with unwanted resources. Something to note im not the only one just google it and you will see. Also you did not mention this in your video.
Disable "Live Traffic Monitoring" (or set it to Security Only), and also disable scheduled scans if you have them set to run during peak periods. That'll fix it up. Unless you have a gutsy intensive plan/VPS, Live Traffic Monitoring for all connections cripples the site pretty easily.
lol. at 23:06 tips and tricks sounds to sketchy for me to trust. I'm just starting from scatch on my website. I'm so new to website. and learning on my own and anything I can. I still find your old content useful. now i learning about what security would work for my website at free or budget price. I watch a lot of your video and are useful. Now I'm wondering if getting a VPN service is needed. I only plan on only operating in the USA. but since my website is protected by wordfence and my Hosting company. Do I need to cough up additional service for VPN when I first start my webstie?
Hi, could you explain why wordfence creating issues like The current scan looks like it has failed. Its last status update was more than 2 hours 59 mins ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. Click here for steps you can try.
I'm unable to scan with word fence. I tried every step mentioned in the word fence "Scan Troubleshooting" post under "If your scans aren't starting" to fix it, but nothing worked. Anyone here able to help me out? I'd really appreciate it. Very helpful video! Thank you.!
Hello darrel great video It's not enough TO THANK YOU! Can Iask if we most install Wordfence before or after finshing website buid?!And how about JetPack plugin?
Hi sir, thanks for the great tutorial. I have one issue which I am facing right now. My wordpress dashboard is completely disturbed. Whenever I tried to open any of the option in dashboard it is giving 404 error. Can you help me regarding this?
Sucuri and Wordfence are both highly regarded WordPress security plugins. Choose based on your specific needs, taking into account features, performance impact, user interface, support, updates, and pricing. Test both to see which one is best for your website.
Sucuri and Wordfence are both reputable security plugins for WordPress. Choose based on your specific needs, considering features, performance impact, user interface, support, updates, and pricing. Test both to see which works best for your website.
Thanks for this. Really appreciate that you chose NOT to embed a talking head PiP in the instructional segment. 7:13 The channels that do impose a PiP are so annoying. I tend to bounce right away. I never subscribe to their channels and avoid them in the future. Is it millennial narcissism thing?
Darren your vids are great however gdpr is for data protection and is the toughest privacy and security law in the world. I as an EU citizen am quite happy to get all the protection I can get as for communism every little helps.
Google Sitelock and run far far away or see the comments on this video: th-cam.com/video/cYDUZ5-iYfY/w-d-xo.html Sucuri is fine if you are looking to pay for it (firewall is not included in free version), AND the other major problem is if you have localised servers for speed. Sucuri uses a cloud firewall meaning data is sent to them, verified, and then sent to your server, it requires you changing your DNS Servers to go via them. So if you are in say Australia and serving data to local Australian clients, it's a bad move as you sacrifice all the benefits of a local host, because your data heads overseas before heading back. Wordfence is still the best of the lot, and I combine it with WP Hide to maximise my site security, before adding small pieces of code in headers to lock it right down.
Make sure you dont get hacked, just download the plugin and follow the yellow brick road
Darrel Wilson Please Answer:-
1) Please make a video comparing Wordfence , WPCerber, Sucuri from non techie point of view. Which one is easiest to use ? Example if there is an attack a non techie can get clean up from Sucuri expert so does this really help Non-techie? Are other plugins useful for Non-technical people (Cerber/wordfence)? Because not everyone can understand weather the code is malicious or not & they may delete essential files.
Use paid plugin features for comparison if possible. Please make a video for WPCerber security plugin
2)Although you might say its not necessary but i want to know; Will there be a problem if I use paid Sucuri + WPCerber both in 1 website?
What's wrong with GDPR? As I understand it, GDPR aims to protect people from 'unilateral' data harvesting.
How does that relate to communism? In fact, it sounds like the exact opposite of.
I have quite successfully implemented another kind of fully automatic anti-brute force detection sysem, which is dependant on how many times you try to log in with the wrong pass word. So, it is a very basic idea, the first time you use the wrong password, you have to wait 1 second to log in again. Next time, if you try to log in within that second with a wrong password, you have to wait 2 seconds, then 4 seconds, then 8 seconds and you can see how this will lead very quickly to almost infine (which is why my limit is 2^8 seconds). Then, you want to make sure that there is some way to escape it if you are a legit user, so the last IP which successfully logged in to the page is stored on the server and it will be possible for that IP to use wrong pass word without waiting.
I haven't impemented the banning of a user for wrong log in after a certain amount of times, because I find it quite annoying, but that is easy to implement.
Now, one last thing you need to do is, you only want to show the login form to users which has GZIP in the Accept-Encoding, and the reason for this is, all real users have that in that field, while many bots do not. So it's a very simple human verification. It will let some bots in, but it will keep out zero humans.
Just tried it out today after watching this and I'm already shocked how many attempts there were today to login as admin. Thanks for the tutorial!
Yeah there are quite a few >
Loved the video but I have a suggestion. Remember that the rules you set for other visitors, apply to you as well. If you mistype you login name you may also be logged out for the specified time too. I logged myself out and learned the hard way. Except your IP from this rule.
I don’t know why, but for some reason Wordfence broke my site. Maybe because it was last updated 1 month ago. Learned how to deactivate the plugin thanks to my host’s customer support. I learned one other thing. Always log which plugins you update. Thought it’d be good to share this info in case someone else runs into the same issue. 😊👍
Recently, I just worried about the security of my website. however, I found your video ! I'm thankful for your tutorial about building-website knowledge.
Great highlight video Big D as indeed the most important issue period in WordPress. 7 yrs after starting my web design biz this still yes the best goto security plugin for self and clients. 💪🏻⚡️👊🏻🖥💻📱💥⚡️🙌🏻 #priceless
It’s funny a lot of my tutorial domains get hacked a big problem two is I forget to change the password
Just a question, i've enforced securi already, should i use wordfence too?
This security plugin is very helpful for us it's features are awesome . But not beginer understand this plugin , this tutorial is helpful
Darrel, another great video from one of the 3 guru's of WP. You, Ferdy and Nayyar!
Can I ask in your opinion which security plugin is best seeing as you have reviewed both.
Wordfence or iThemes?
I know that you have said iThemes is 2nd in this video. But thought I'd check to make sure your opinions have not changed.
Many Thanks.
Hi Darrel, Thank you so much for your generosity.
Epic video, got hacked few times before started using Wordfence, my client was like, why is my page on Japanese language (we are in Croatia)
As alway thank you for tutorial 😁!
it happened with me as well
Thanks Darrel. This tutorial is really helpful.
Is it bad to use 2 security plugins for example iThemes and Wordfence ?
Wordfence has a really good scanner, but once you have malware their support is really expensive. Right now it's $322 per site due to high demand.
While Sucuri offers their package for $200/year which includes removal. I would recommend getting Sucuri instead and it's less server heavy as they do offsite checks.
Fantastic Upload as always!! Good Job Mate!!
Great tutorial Darrel, really appreciate your efforts.
Could you have this and ithemes security at the same time?
Awesome always! Thank you!
Very nice tutorial on WP security! I want to know how to check if the files marked in the scan as critical should be deleted or not? as i see some file related to Installatron codes which could be part of wordpress plugin or theme. Being a non coder how to decide whether to delete or not?
Thank God! The Moroccan person is not a Hacker! 😆 I really hate hackers! Handreds a day trying to hack my website! Why does hackers do it? Instead they could create a website and work on their own instead of wasting their time hacking, if they succeed, it's so bad! 🤬
Very helpful tutorial Darrel, thank you soooo much 😊
I’m glad this was helpful
Today wordpress websites are the number target for hackers. Make sure update the plugins to the latest version.use complicated passwords. So stay updated. I am using another security plugin. It is good. Wordfence is another good one.
True story!
why the block google fake crawlers was gone ?? If the plugin test suggested litespeed while hosting suggested apache+mod..... should I do it manually? Many thx !
Thank you Darrel most helpful information
Is this plugin makes the website slower than using Ithemes security plugin?
Dear Wilson, thanks for your explanation, just a question please.. is it useful to use Wordfence and Cloudflare together? or the Cloudflare is enough?
hey , Using Wordfence and Cloudflare together can provide complementary security features. Cloudflare offers CDN and firewall protection at the network level, while Wordfence provides more detailed WordPress-specific security measures like malware scanning and login protection. Using both can enhance your site's security, but ensure there's no redundancy or conflicts between their settings to avoid performance issues or false positives.
Wordfence is using too much CPU and was really bad this plugin is not that good as resalt. Ones removed everything was fine again. So I am using ithemes-security-pro and that works much better than this and it does not hit my server with unwanted resources. Something to note im not the only one just google it and you will see. Also you did not mention this in your video.
how much did you pay for the pro version ?
Disable "Live Traffic Monitoring" (or set it to Security Only), and also disable scheduled scans if you have them set to run during peak periods. That'll fix it up.
Unless you have a gutsy intensive plan/VPS, Live Traffic Monitoring for all connections cripples the site pretty easily.
Hi sir, please tell me can we use wordfence and all in one wp security plugins on same website at a time for better security?
16:00 Checkbox is no longer in Version 7.4.12, or has it been moved with a different name ? I do not know 🤔
Great video thanks Darrel
lol. at 23:06 tips and tricks sounds to sketchy for me to trust. I'm just starting from scatch on my website. I'm so new to website. and learning on my own and anything I can. I still find your old content useful. now i learning about what security would work for my website at free or budget price. I watch a lot of your video and are useful. Now I'm wondering if getting a VPN service is needed. I only plan on only operating in the USA. but since my website is protected by wordfence and my Hosting company. Do I need to cough up additional service for VPN when I first start my webstie?
hey thanks for your comment !
so try to contact your hosting support they will guide to the best fro your website .
Hi, could you explain why wordfence creating issues like The current scan looks like it has failed. Its last status update was more than 2 hours 59 mins ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. Click here for steps you can try.
is the disabled right click option a security feature in wordfence?
Can you guys help me... when i scanned mine it shows a lot of cache and it says malicious by hackers.
how will I fix this? and do i need to delete it?
I'm unable to scan with word fence. I tried every step mentioned in the word fence "Scan Troubleshooting" post under "If your scans aren't starting" to fix it, but nothing worked.
Anyone here able to help me out? I'd really appreciate it.
Very helpful video! Thank you.!
Nice video, thank you for sharing it with us.
Sorry, this what you showed in this tutorial is that all about setting a Wordfence for security, there is nothing more need to do with Wordfence?
Hello darrel great video It's not enough TO THANK YOU! Can Iask if we most install Wordfence before or after finshing website buid?!And how about JetPack plugin?
Great video. Thanks a lot!
Hi sir, thanks for the great tutorial. I have one issue which I am facing right now. My wordpress dashboard is completely disturbed. Whenever I tried to open any of the option in dashboard it is giving 404 error. Can you help me regarding this?
i just want to know how to dlete it since its blocking me from going to websites that arent malicous
what do you think about Malcare plugin ?
*facepalm* ... the interface is shocking.
You didnt discuss 2FA (two factor authentication)
hello .can you tell what to do , just after installing wordpress to make it full secure
should i go with sucuri or wordfence?
Sucuri and Wordfence are both highly regarded WordPress security plugins. Choose based on your specific needs, taking into account features, performance impact, user interface, support, updates, and pricing. Test both to see which one is best for your website.
Sucuri and Wordfence are both reputable security plugins for WordPress. Choose based on your specific needs, considering features, performance impact, user interface, support, updates, and pricing. Test both to see which works best for your website.
Love your videos!!! :)
Glad you like them!
hello does this plugin stop spam comments?
Thanks for this. Really appreciate that you chose NOT to embed a talking head PiP in the instructional segment. 7:13
The channels that do impose a PiP are so annoying. I tend to bounce right away. I never subscribe to their channels and avoid them in the future. Is it millennial narcissism thing?
Jetpack has security features
but you didnt show how to block countries from visiting
Darren your vids are great however gdpr is for data protection and is the toughest privacy and security law in the world. I as an EU citizen am quite happy to get all the protection I can get as for communism every little helps.
I'm facing issue in speed wordfence have slow down my website
Do you have solution for that?
I dont think it's a security plugin the issue, you probably use a heavy page builder with lot of HQ & HR uncompressed images
Nice, thanks
Thank you
Ithemes security or wordfance???
Ithemes I think is lighter
What do you think of Sitelock or sucuri?
Google Sitelock and run far far away or see the comments on this video: th-cam.com/video/cYDUZ5-iYfY/w-d-xo.html
Sucuri is fine if you are looking to pay for it (firewall is not included in free version), AND the other major problem is if you have localised servers for speed. Sucuri uses a cloud firewall meaning data is sent to them, verified, and then sent to your server, it requires you changing your DNS Servers to go via them. So if you are in say Australia and serving data to local Australian clients, it's a bad move as you sacrifice all the benefits of a local host, because your data heads overseas before heading back.
Wordfence is still the best of the lot, and I combine it with WP Hide to maximise my site security, before adding small pieces of code in headers to lock it right down.
thanks bro
Hy bro i want make a website review for webhosting services on my contry, Can you make a tutoriel for this? Thanks.
Have you seen the rehub theme?
No!! I will see it now
I thought previously you had recommended Really Simple SSL?
you can use this or really simple ssl, this is more for security
Calling GDPR communist is probably the stupidest thing I've heard today and I've heard Boris Johnson speak.
I didn't even download this, it just appeared. Idk how
I liked you the moment you said you don't want to comply with GDPR. Quite libertarian should I guess.
How to remove spam url injection
is not 179 but 11 mounts later $490!!
Tips are for Tricks
Witkn
Sir make a website for bitcoin trading
Sounds like a project
@@darrelwilson sir I want start a project
This is dumb. Just don’t Wordpress and you don’t get hacked
hey
if you need help feel free to drop your questions in the comments below .
Do you actually know what communism is ?
Great job, thanks !!!!