Hi Kedar! As promised, here it is 😊 Follow it step-by-step and your website is like fort-knox secure! Let me know if you have any questions. I'm glad to help!
Hi there! You are very welcome! Thanks for the kind words, I really appreciate it. I’m glad I could help you out with this video. Stay tuned, more awesome tutorials coming up! Have a great day and take care 😀👍🏻
Hi there and you are very welcome. No this email can be can be any one you are using. Doesnt have to be the same as the website. Because its actually a kind of 'sign up' to the system of iThemes.
Can't thank you enough for this valuable tutorial matt! God bless u man❤ U r saving many people's hard worked sites from getting hacked by nonsense hackers.. Pls keep on making more of such WP security based videos, you're really a WP doctor!❤
Hi Saurabh, you are very welcome! It made my day to read your comment! Thank you for taking some time out of you day to write me. I will keep creating great video's indeed 😀 If you want any specific topic covered, just let me know, I'll add it to the list 😊
Man... best WP guide channel ever!! Thank you so much. I started to create websites and you are the first one that make me really feel secure about what I'm doing, without ever skip any step. Awesome
Hi Fuzful! Thank you for your comment, I really appreciate it! It’s heart warming to read it, that’s the whole reason why I make videos, to show you that you can do it yourself, if you have a good teacher 👍🏻😀 Have a great day and stay safe!
Super simple tutorial. However, I did everything step by step and got an email that my login info had been changed with my new URL. I clicked on the URL and instead of going to the login page, it redirects to my website URL. If I use the old WP URL it redirects to the ADMIN user name that I also changed but doesn't work so it comes back as wrong login information :/
Hi there! Thanks, I tried to make it so simple as possible 👍🏻😀 Well it could be that your browser has it cached. Maybe try to open the login link in a incognito / private window browser?
Thanks so much for getting back to me. I tried using incognito but same thing happened. It redirects to my website. It is also keeping me from logging in to any of the websites that I have under my hosting plan. How do I remove the plugin? My hosting company says they cant help :/ @@WPressDoctor
Hi there! You are very welcome! I’m glad the video was useful. I hope my other video’s will also add something to your knowledge and skillset! Getting the word out there with your 👍🏼 and subscribe, and possibly a share would be much appreciated. Good luck with your adventures. Have a great day and take care. Greetings
Amazing Matt! I thought my eyeballs would turn square and fall out but I followed every step. Wow! It's a college course! Now I have to do ti for two more websites.
Hi there! Thanks for the kind words, I really appreciate it. Thank you for taking some time out of your day to write me! I’m glad I could help you out with this video and that your website has been secured now. Good luck with the other two websites, you can do it 😀
You are very welcome! Thank you for writing a comment. Really appreciate that! Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
Hi Utpal! You are very welcome! Thank you for writing a comment. Really appreciate that! I'm glad I could help you out with your website. Please consider a 👍🏼 and subscribe or maybe a share for my video, that would help me a lot! Good luck with your adventures. Have a great day and take care. Greetings
Wow this is great. I just got to the end bit and am so glad you included how to get back into our sites if we lock ourselves out. I daren't try and login again at the moment lol.
Hi again! I’m glad I could help you out with this video also 👍🏻😀 Yeah the last part is sometimes really necessary haha. The times I locked myself out 🤪. Have a great day and stay safe!
You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
You are very welcome! Thank you for writing a comment. Really appreciate that! Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
Hi Gideon! It makes me happy to read your comment, thank you for taking some time to write me. Really appreciate it! If you want a free website review / audit, check wpressdoctor.com/audit
Hi there! Thanks for you kind words, I really appreciate it. If you have any questions, just let me know, I make sure to get you back on the road again. Have a great day and stay safe 👍🏻😀
You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
You are very welcome! Thank you for writing a comment. Really appreciate that! Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
Thanks Matt! You helped me discover a certified way to fry one's brain. Just have them follow this tutorial while working on their site while changing hosting providers all while helping a loved one with tax documents. Yep, did anybody see my Margarita? ...... Anyone? ........
Thanks Matt.I watched your three videos about wp security.my first site is a simple blog that I recently published 🤗. Now I got a second blog site order🥰. my question will be: ithemes wordfence solid security.which of these plugins do you think I should prefer and specialize in it?
Hi Akhenaton! Thanks for the comment and great work! I would go Solid Security all the way, iThemes is now Solid Security, so there is no iThemes more 😁
Hi great video, I did follow your instructions on my website and logged out before getting to the two factor authentication step, when I logged in again I skip the setup so long to just log in and continue with the tutorial but now I'm by the two factor setup and the page for setting it up doesn't show up anymore when I'm done logging in, lol hopefully that makes sense
Hi Douglas! Thanks for the comment. Yeah it makes sense! Just disable it inside of the plugin and then enable it again, should do the trick. If not, go to “users” -> “my profile” and set it up from there 💡😃
Thank you for great turtorial, but in the end I just ended up with Authentication Codes when I logged in the first time even if in the settings I choosed all methods so how can I get this to work properly?
Thank you very much! Indeed I didn’t do that. About the country blocking, check this article: help.ithemes.com/hc/en-us/articles/228222927-The-Misconceptions-of-GeoIP-Banning
Excellent tutorial, thank you. Security Check Pro: Detects the correct way to identify user IP addresses based on your server configuration, --- When i clicked run I got this error --- "cURL error 28: Connection timeout after 10001 ms"
Hi there! Well some things are hosted related, but try searching the website of iThemes, they have all protections listed there. Have a great day and stay safe!
Excellent tutorial, thank you. One question: at 18 mins you talk about restricting access to Rest API. Does this also count for using API keys on your website for plugins such as mailchimp, google analytics etc?
Hi AppMole! Thanks for your question! No those are completely separate. This is about connecting other apps to your WordPress website for creating posts for example. If I’m not mistaking of course 👍🏻😀
Hi Geraldine! Thanks for your kind words, I’m glad you loved it 👍🏻😀 Well Akismet for spam still does a really excellent job. I would advice also to let your website route via CloudFlare to stay safe from DDOS attacks ⚡️.
Thank you @@WPressDoctor - I just found your chanccel and it is brilliant. thank you for all the content. How do i do that? have you videos on that and also do you recommend connecting to google console
Hi Matt, That was another Amazing video, and I've also watched your other Security video about WordFence! But I do have 2 questions about these Security videos: 1. Which Security plugin do YOU prefer? iThemes Security or WordFence? 2. Can iThemes Security & Wordfence work together on the same website or will they Break the website and not work well? Thank you and I hope you'll be able to do a Full Tutorial of WPRocket and How to stop SPAM Comments.
Hi James! Thank you for your questions! I prefer iThemes security, works great with my Divi websites and hosting company. Never had any issues. 2) I think they could run toghether but I don’t advise that. It could be that it will be causing problems you don’t notice on the short term but then suddenly it appears that you have a huge database because of a logging conflict or something… Those two tutorials are already here! WP Rocket is here 👉🏻 th-cam.com/video/ekJpyGWOh5A/w-d-xo.html and here is how to stop SPAM comments 👉🏻 th-cam.com/video/R5fXuPxOm7Y/w-d-xo.html have a great day!
@@WPressDoctor Thank Matt, Do you think it's enough to use the Free version of iThemes Security like you showed in your amazing tutorial or is there any Advantage to use the Paid version? Which isn't cheap = 99$ per year
Hi James! I have not yet found a profound reason to buy te paid version… but I might change my mind if someone from iThemes explains it to me or demonstrated it 🤔
Hi again! Thanks for your good question. I personally prefer. iThemes because of the clean interface and the hiding the back end feature. What do you prefer?
Is it true that Ithemes let's in some types of attacks that Wordfence does stop. I had Ithemes security but since I heard that I moved to Wordfence premium... What are your thoughts on that?
Hi Matt, thank you for this video, I am new and learning. I have a problem, I followed all the step as you explained, but now I am logged out of my WordPress dashboard. I have followed the steps to gain access again but I am met with a 'Page Not Found' error. Please help, how do I regain access?
Hi there! Thanks for your question! At the end of the video I show you exactly how to do this 😀👍🏻 Because your not the only one who has encountered this 😂 Let me know if that works for you!
Hi Kelly! Learn here everything about it: chmodcommand.com/chmod-775/ but basically it’s a potential security risk for your website. Potential and highly unlikely to be abused. But it’s a risk, that’s why it’s flagged.
Hi again! No it works without XML-RPC as far as I know. I have both plugins enabled on some of my websites and also client site, never had any problem. 👍🏻
Hi Anna! Well the cURL error is a WordPress REST API issue. The problems arise mostly from your hosting company. PHP version or old cURL version or your hosting company firewall is blocking it... try to ask them first 😊
@@WPressDoctor you are awesome!! :) Thanks so much! That's what I thought, but after chatting with them and trying different things for 1.5h (yes!) we couldn't figure out why. Oh well..
Hi there and thanks for the question! No I only use Solid Security on all my websites. I never use them at the same time, as that could only create problems in my opinion 😁
The only thing i miss in this plugin is that it not includes malware scan and an advanced firewall. Could you also make an advanced security video: moving wp-config file outside installation, how to avoid /wp-json/ etc.....would be great - thanks
Hi Michael, yes the malware scan is still something they should add to the plugin. Even the PRO version would be great to have it. For this I actually use WordFence once to scan and clean if there is a hacked website. Moving WP-Config is actually a fun idea to implement on the next video about security. Its a bit for the advanced user, but with step by step instructions, everyone could do it 😊
@@WPressDoctor, I had the same question. So, instead of repeating it, just let me confirm I got your point. Wordfence is too heavy to be used just for malware scanning. So, do you mean you install Wordfence, scan and clean your site for malware, and then delete Wordfence from your site? For the firewall, I think the hosting provider should play this role better than we do at our website levels. What do you think? If we really need it, I'd go with Cloudflare, which provides great WAF protection.
Yes you got it right Younis! WordFence I only use for one time use when a site has been hacked. It’s not to heavy, it’s just lacks a couple of features I want to have like 2-factor authentication and hiding the backend 😀
Amazing video Matt! I am confused at 13:00, you excluded cache folder onto the right side. However, I don't have cache folder there in wp content. I am using Litespeed cache plugin and it is in the plugins folder. I want to confirm whether or not should I exclude the Litespeed cache plugin? Thank you!
Hi there! I have created 3 videos about that topic, here is one: Fix Hacked WordPress Website | A Step-by-step Guide to unhack WordPress th-cam.com/video/7UoMpX_3c_M/w-d-xo.html I hope it will help you clean your website 😀
Hi there! Thanks for the feedback. In my newest video's I have not added it in (only at the beginning) as the camera is always on, in the newest video's in the lower right corner 😊🔥
Hi Matt, do you use both wordfence and itheames on one website? or is it ok to just install either of the two and pay only one plugin? which one do you prefer to use?
Hi again! Great to see you here. Well there is no benefit in using them both at the same tame, so yeah on new website I only use iThemes. I like the interface better and the possibility to change the backend URL is quit nice.
Hi there! You are very welcome. That is because you need to get a SSL certificate via your hosting company. Usually this is free, but it has to be activated. If that’s activated and you still have insecure content, it’s because mixed content. Report back here if you have that 👍🏻🤩
Hi Ahsan, thank you for your question! In daily life I use iThemes on all my own & clients websites. The hide backend feature and the two-factor authentication + a really clean interface is what does it for me 😊
@@WPressDoctor I wonder why and am the admin (created the website). Once I go to file manager and rename it to the way it was before, then sign out. Now, when i try to login in again am looked out till I rename the plugin it. It's irritating.
Hi brother, today I came to your channel for the first time. Just subscribed. Bro, I want a video from you about the difference between the ninja firewall vs iThemes. Which one is better and which one is lacking which feature. No one has created this video to date. My brand name is Khalsa Website Designers and I am currently using Ninja Firewall.
Hi Daljit! Thanks for your kind words, really appreciate it. I’ll add it to my list! Never heard of this plugin before. It’s gonna take some time though, the list is looooooong 👍🏻😀
Hi Matt, when using the hide backend feature I get a 404 not found when using the new login slug, some users can access via the "....hb-token=...." url but others can't even when clearing cache etc, any ideas??
Hi there! If you have a lot of people logging in to your website, don’t bother changing the url slug. It will do more harm then good. Just keep XML-RPC disabled and you have already saved yourself a lot of pain 😀👍🏻
Hi Thomas and thanks for the question! If they have weak passwords, they need to update it after their login. If you changed the login URL, they need to have the right URL of course also. Besides that, nothing changed 😃
Thank you Matt. At minute 22:34 when you ran the security check pro, my own said that " site does not support SSL" I have ssl certificate and the lock is on in the browser. Do you know why this is the case?
Matt, when I go to save my settings after changing the login slug, I get a message at the top saying .theme_compat_slug should match pattern - and then a load of digits, commas etc. Do you know why that is please?
Hi there! Thanks for your question. It seems that your theme or another plugin needs the ‘normal’ url slug for You or your visitors to be able to login… what theme are you using?
Thank you for this video Matt. I have been following you step by step. Heres whats up, I have set up 2fa but everything i try to login, it doesnt ask me for 2fa code, it just takes me straight to my backend. Is this normal? Unlike wordfence, everytime you want to login, it asks you for a 2fa code.
Hm that’s not supposed to happen. Try going into Wordpress native “users” then “my profile” and see if you can turn it on somewhere there 👍🏻😀 let me know if that helps.
Hi there! Thanks for the question. Yes you should definitely install it on each and every website. It depends on how the hosting is set up (silo’s?) but when they hack one website, they could go to other sites also in the worst case. Make sure to close all gates on all websites!
Thank you 🙏🏿 for the excellent tutorial but I have a worry. It reduced my website's best practices rating according to PageSpeed Insight from 100 to 83, what maybe the problem? Thank you once again and waiting for your reply
That’s sounds strange. You sure there is nothing else going on? I will investigate on my own websites, but I have never heard this before 🤷🏼♂️ what theme are you using?
Thanks for this educative video. But after I followed all the steps in the video at the end I cant logo again to my wordpress again. I tried using my correct login details, which I used before the settings no way. And I want to deactivate the plugin because it will affect the settings. Pls, how can I log in to my WP backend ??
Hi there, Oh that's a frustrating thing. Well actually its easy to fix. Just go to here in the video: th-cam.com/video/P-Mmv-Zv9Hc/w-d-xo.html and follow my steps using free FTP. Let me know if that works!
@@WPressDoctor I have gotten the new URL for my WP back end. I login into wp through my cpanel. But my formal login details is not working on the new wp url. How can I get the new login details?? Is the cpanel secure, because someone can still access WP back end through the Cpanel ??
Hi Ehtesham! Thanks for your good question. If you have installed WordFence thoroughly than no, it’s not needed to install iThemes next to it. Both plugins do kind of the exact same thing (except malware scan and hiding the WP-admin). So your good 👍🏻😀
Ok, this may be a silly question... but I own a haunted tour company. If I'm selling tours through a 3rd party widget on my site, would I be considered E-Commerce, or would this method work? Thanks for doing this tutorial!! Much appreciated!
Hi there! Thats a interesting product 💡. However, you can sell it using e-commerce, no problem. Yes iThemes will protect you then! Does that answer your question?
Thank you! You had said something about watching a different tutorial if it was e commerce so I just wanted to check that I was setting it up with the right info 😁 thanks again for your help!!
I feel after installing this plugin my payment gateway Razorpay is having some issues in order to gather the data using webhooks, is there any way to add some IPs in the whitelist which are provided by the Razorpay team
Hi There! Yes of course you can: docs.contentstudio.io/article/541-how-to-whitelist-your-ips-on-ithemes-security If you still experience problems you could also switch to WordFence. It has a “Learning mode” so that it will make sure it still works 😀
Is it possible to change the set-up once iThemes is already installed? The site I'm building at the moment is likely to have an ecommerce shop added at a later date. So for now it's a brochure website but I'd want to be able to adjust the settings when it becomes transactional. Or would I have to delete and re-install the plugin?
Hi Anna! Yes it’s possible to change the settings in a later stadia. No problem at all! The difference is mainly the security for customers and login for them. Also integrations with your administration software (bookkeeping) and shipment software could maybe use the XML-RPC api, but that totally depends. But you can try that out when you add WooCommerce 👍🏻😀
Hi there! Thanks for the question. It’s because they rebranded it to Solid Security. Here is the new tutorial: Secure Your WordPress Website 2024 | Solid Security Tutorial th-cam.com/video/VL5j_YJgnLM/w-d-xo.html
Hi Matt. Brilliant video. I am just setting up my WP site using your tutorial. You say that there should never be a user named administrator. So I should create a new user with the administrator role with a different nickname? How can I do that when I only use one e-mail address? :) It says I can't use the same one. Cheers!
Also when Running the Security Check Pro, it says "Your site does not support SSL." - but it does. I activated it in my hosting + using the plugin Really Simple SSL. Do you have an idea about what could be wrong? Thank you very much!
Hi there! Thanks for your questions. Well you really need another e-mail adres to make another user inside your WordPress website. You can make a free e-mail adres using gmail or yahoo or hotmail…
When the lock is there and the SSL certificate works, than you can ignore the settings in Security Check Pro, because it’s alright when the SSL certificate works on your website 👍🏻
Hi there and thanks for the question. Well this typicality occurs with some hosting plans. You could ignore it for now and try sending it in to your hosting company as a ticket. It might be that they block some connections…
For some reasons the "hide Backend" doesnt work at all for me. Still access from /wp-admin. With the "hide my login" plugin it works right away :-/ any suggestions?
Hi there! Thanks for the question. It has to do with your cookies of the browser. Try to clean caches and then open your website in incognito (private) window. Let me know if that works?
The content I was desperately awaiting for.
Hi Kedar! As promised, here it is 😊 Follow it step-by-step and your website is like fort-knox secure! Let me know if you have any questions. I'm glad to help!
Thanks! I feel like a child when a teacher teaches. Thanks for this amazing video!
Hi there! You are very welcome! Thanks for the kind words, I really appreciate it. I’m glad I could help you out with this video. Stay tuned, more awesome tutorials coming up! Have a great day and take care 😀👍🏻
Matt - thanks for all your presentations. At 6.30 must note that the email should be teh same domain as the site (I think).
Hi there and you are very welcome. No this email can be can be any one you are using. Doesnt have to be the same as the website. Because its actually a kind of 'sign up' to the system of iThemes.
And Matt, thank you for always always responding to comments and in a timelyu manner too
You are very welcome! I myself always like it when the author of something answers and Actually likes to help people… so that’s why 👍🏻😀
Can't thank you enough for this valuable tutorial matt!
God bless u man❤
U r saving many people's hard worked sites from getting hacked by nonsense hackers..
Pls keep on making more of such WP security based videos, you're really a WP doctor!❤
Hi Saurabh, you are very welcome! It made my day to read your comment! Thank you for taking some time out of you day to write me. I will keep creating great video's indeed 😀 If you want any specific topic covered, just let me know, I'll add it to the list 😊
Man... best WP guide channel ever!! Thank you so much. I started to create websites and you are the first one that make me really feel secure about what I'm doing, without ever skip any step. Awesome
Hi Fuzful! Thank you for your comment, I really appreciate it! It’s heart warming to read it, that’s the whole reason why I make videos, to show you that you can do it yourself, if you have a good teacher 👍🏻😀 Have a great day and stay safe!
Hi guys 🛑🛑🛑 This video is outdated, check out 2024 version: th-cam.com/video/VL5j_YJgnLM/w-d-xo.html 🛑🛑🛑
Super simple tutorial. However, I did everything step by step and got an email that my login info had been changed with my new URL. I clicked on the URL and instead of going to the login page, it redirects to my website URL. If I use the old WP URL it redirects to the ADMIN user name that I also changed but doesn't work so it comes back as wrong login information :/
Hi there! Thanks, I tried to make it so simple as possible 👍🏻😀 Well it could be that your browser has it cached. Maybe try to open the login link in a incognito / private window browser?
Thanks so much for getting back to me. I tried using incognito but same thing happened. It redirects to my website. It is also keeping me from logging in to any of the websites that I have under my hosting plan. How do I remove the plugin? My hosting company says they cant help :/ @@WPressDoctor
Well you got a new subscriber here...
Thanks Benjamin! I really appreciate that. I hope my other videos will also benefit you. Have a great day and stay safe!
Absolutely love this! Thanks
Hi there! You are very welcome! I’m glad the video was useful. I hope my other video’s will also add something to your knowledge and skillset! Getting the word out there with your 👍🏼 and subscribe, and possibly a share would be much appreciated. Good luck with your adventures. Have a great day and take care. Greetings
Amazing Matt! I thought my eyeballs would turn square and fall out but I followed every step. Wow! It's a college course! Now I have to do ti for two more websites.
Hi there! Thanks for the kind words, I really appreciate it. Thank you for taking some time out of your day to write me! I’m glad I could help you out with this video and that your website has been secured now. Good luck with the other two websites, you can do it 😀
Great!
Hi Pronab! Thanks for the comment, I'm glad you liked the video! Stay tuned for more awesome tutorials coming up 😃
Thanks for video, it's helps a lot, make such kind of video. thanks is advance
Hi Muhammad! You are very welcome! I’m glad I could help you out with this video 😀. Have a great day and stay safe 😄
Bedankt voor de video
Hi Ron! Graag gedaan! Ik ben blij dat je er wat aan gehad hebt. Fijne avond nog en tot de volgende video 😃
Thank you for your perfect tutorial for security settings
You are very welcome! Thank you for writing a comment. Really appreciate that! Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
Thank You Matt
You are very welcome Mauro! I’m happy the video was useful to you. Have a great day and stay safe!
Thank you very much bro me from bangladesh
Hi Utpal! You are very welcome! Thank you for writing a comment. Really appreciate that! I'm glad I could help you out with your website. Please consider a 👍🏼 and subscribe or maybe a share for my video, that would help me a lot! Good luck with your adventures. Have a great day and take care. Greetings
Wow this is great. I just got to the end bit and am so glad you included how to get back into our sites if we lock ourselves out. I daren't try and login again at the moment lol.
Hi again! I’m glad I could help you out with this video also 👍🏻😀 Yeah the last part is sometimes really necessary haha. The times I locked myself out 🤪. Have a great day and stay safe!
Awesome Content as always Matt... Thanks for sharing
You are very welcome Seth, I'm glad this video also helped you out!
Thank you so much, Matt! Keep up the great work!
You are very welcome! I will do, thanks 😀👍🏻
Oke Matt, ook deze toegepast! super bedankt!!
Hi Gerhard! Goedzo, helemaal super gedaan! Kleine kans dat je nu opnieuw gehacked wordt. Ik hoop morgen de video te lanceren 😃
Thanks again Matt!! 👍👍
You are always very welcome! I’m glad I could help you out 👍🏻😀
Thanks man. I was looking for a video like this.
You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
Thank you Matt!!! I'm your new subscriber!
You are very welcome and thanks for the sub! I really appreciate it! I’m glad you like the videos I create 👍🏻😀
Tanks a lot
Hi there! You are very welcome! I’m glad the video was useful to you. Have a great day and take care! 😀👍🏻
Real helpful tutorial.. Thanks Matt :)
HI avinash raj! You are very welcome! I'm glad the video is helpful for you 😀 Have a great day and stay safe!
thank you my teacher
You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
Thank you Matt, this is awesome
You are very welcome! I’m glad you found the video useful. Have a great day and stay safe!
Thanks Matt!!
Hi Shaun! You are very welcome! I’m glad the video was useful to you. Have a great day and stay safe!
Thanks a lot Matt. It was very helpful
Hi Kayra! Thanks! I'm glad the video was useful to you! Have a great day and stay safe 😊
Love it, great tutorial. Thank you!
You are very welcome! Thank you for writing a comment. Really appreciate that! Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
Thank u for sharing
Ur welcome!
Another great video, Matt 👍
Hi and thanks Ricodu! I’m always trying to make better video’s so this is really kind of you. Have a great day and keep safe 👍🏻😀
Man besides that your content is very educative, it is neither short of lots of fun. Great tutorial s always!!!
Hi Gideon! It makes me happy to read your comment, thank you for taking some time to write me. Really appreciate it!
If you want a free website review / audit, check wpressdoctor.com/audit
Thanks ferdy for best youtuber channel suggested
Yes he is a nice guy 😀
My new favorite TH-camr
Hi there! Thanks for you kind words, I really appreciate it. If you have any questions, just let me know, I make sure to get you back on the road again. Have a great day and stay safe 👍🏻😀
Simply amazing tutorial
You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
Thank you Dr. Matt😊
You are very welcome! Don’t forget that this video is a bit old, all is replaced with Solid Security - see my newest video about that 👍🏻😀
@@WPressDoctor I surely need to upgrade ASAP 😊😊
Thank you very much sir for this
Hi there! You are very welcome. I'm glad the video was useful to you! Have a great day and stay safe!
tnx my friend
you deserve 10m like and subs
Hi Ali! Really appreciate your kind words, you are very welcome! Who knows! Aiming to hit 30.000 subs this year, who knows!
The best video os security on WordPress
Hi there! Thanks, I really appreciate you saying this. Made my day! Stay safe and I hope you never get hacked 😀
thank you 🎉
You are very welcome! I’m glad the Nigerian was useful to you. If you bump into any problems, let me know 👍🏻😀
Thank you a lot!
Hi Natalia! You are very welcome, I’m glad I could help you out with this video! Have a great day and keep safe.
Great content as usual. Thanks for taking the time.
Hi Reem! Thanks! Really appreciate it! Your very welcome. Have a great day and stay safe! 😀👍🏻
great video, thank ❤❤
You are very welcome! Thank you for writing a comment. Really appreciate that! Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
Matt, you rule. super thanks
Thank Thomas, really appreciate your comment! I'm glad I could help you out! Have a great day and stay safe 😊
Always the best ❤❤
Thanks for the love!! Really appreciate it! I hope you never get hacked 😇
glad i found you buddy, your a funny man
Hi Steven! Thanks ! Really appreciate it. I’m glad you liked the video. Stay tuned for more videos 😀👍🏻 Have a great day and stay safe!
Great video, thanks!
Hi Darren, thanks for your kind words, really appreciate it! I’m glad I could help you out. Have a great day!
Great video. Very help full for no-nerds. 😅
Hi Moritz! Thats really kind of you to say that. Thank you very much! I'm glad I could help you out 😊
Thanks Matt .. we need a comparison between iThemes and wordfence, please.
Hi Ahmed! Thanks for the suggestion. That’s a great idea, I’ll add it to my list of “to make videos”. Thanks a bunch. Have a great day and stay safe!
Thanks Matt! You helped me discover a certified way to fry one's brain. Just have them follow this tutorial while working on their site while changing hosting providers all while helping a loved one with tax documents. Yep, did anybody see my Margarita? ...... Anyone? ........
Hi Michael, you made me smile man, a nice comment hahaha. No one said multitasking is a good thing 😂
@@WPressDoctor In all seriousness, one heck of a thorough tutorial. I thank ya. Have a great day!
You’re very welcome! Stay safe and keep those hackers out 🤩
Thanks Matt.I watched your three videos about wp security.my first site is a simple blog that I recently published 🤗. Now I got a second blog site order🥰. my question will be: ithemes wordfence solid security.which of these plugins do you think I should prefer and specialize in it?
Hi Akhenaton! Thanks for the comment and great work! I would go Solid Security all the way, iThemes is now Solid Security, so there is no iThemes more 😁
@@WPressDoctor 🤷🏻🫠🤭
Thank you for detailed video. Liked and subbed!
Thank you Raiido! Really appreciate it! Have a great day!
Checkmate! Saved for later and use it on all my client projects XD
Sadly i cant subscribe a second time
Good to hear you saved the video 😀👍🏻 I’m glad I could help you out and I hope you never get hacked 😀 thanks for being a great subscriber!
Hi great video, I did follow your instructions on my website and logged out before getting to the two factor authentication step, when I logged in again I skip the setup so long to just log in and continue with the tutorial but now I'm by the two factor setup and the page for setting it up doesn't show up anymore when I'm done logging in, lol hopefully that makes sense
Hi Douglas! Thanks for the comment. Yeah it makes sense! Just disable it inside of the plugin and then enable it again, should do the trick. If not, go to “users” -> “my profile” and set it up from there 💡😃
@@WPressDoctor thank you so much🙏 and thanks for the response
Hi Matt! Thank you for your videos. I have a question which one do you prefer the best to secure your website Ithemes Security or Wordfence?
Hi Stacey! Thanks for the good question. On new websites I prefer iThemes! I lock it down entirely and no one ever gets in 😀.
Thank you for great turtorial, but in the end I just ended up with Authentication Codes when I logged in the first time even if in the settings I choosed all methods so how can I get this to work properly?
Hi there, well try to change the verification mode to mobile code and email only. That should work?
Hello. Good video!. But you did not tell an example - how to limit traffic by ip or by country
Thank you very much! Indeed I didn’t do that. About the country blocking, check this article: help.ithemes.com/hc/en-us/articles/228222927-The-Misconceptions-of-GeoIP-Banning
Excellent tutorial, thank you.
Security Check Pro: Detects the correct way to identify user IP addresses based on your server configuration, --- When i clicked run I got this error --- "cURL error 28: Connection timeout after 10001 ms"
Hi Rose! Yeah that sometimes happens. Try again later or try disabling your caching plugins 👍🏻😀
@@WPressDoctor Thanks for reply, i removed i Themes due to some plugin are crashing
Many thanks for your dedication, it was super usefull! +1 subsc!
Hi there! You are very welcome! I’m glad it was useful for you! Thanks for the sub, I hope my other videos are also useful for the future!
Hi and thanks for sharing. Does this plugin solves all problems with: secure referrer policy, x-frame, x-content, hsts, content security?
Hi there! Well some things are hosted related, but try searching the website of iThemes, they have all protections listed there. Have a great day and stay safe!
@@WPressDoctor Thank you. It would be great to see a separate video for this topic. I have noticed that many smaller websites have these problems.
Excellent tutorial, thank you. One question: at 18 mins you talk about restricting access to Rest API. Does this also count for using API keys on your website for plugins such as mailchimp, google analytics etc?
Hi AppMole! Thanks for your question! No those are completely separate. This is about connecting other apps to your WordPress website for creating posts for example. If I’m not mistaking of course 👍🏻😀
Love this. do you recommend other plugins along side this for security/firewall and/or spam?
Hi Geraldine! Thanks for your kind words, I’m glad you loved it 👍🏻😀 Well Akismet for spam still does a really excellent job. I would advice also to let your website route via CloudFlare to stay safe from DDOS attacks ⚡️.
Thank you @@WPressDoctor - I just found your chanccel and it is brilliant. thank you for all the content. How do i do that? have you videos on that and also do you recommend connecting to google console
Hi Matt,
That was another Amazing video, and I've also watched your other Security video about WordFence!
But I do have 2 questions about these Security videos:
1. Which Security plugin do YOU prefer? iThemes Security or WordFence?
2. Can iThemes Security & Wordfence work together on the same website or will they Break the website and not work well?
Thank you and I hope you'll be able to do a Full Tutorial of WPRocket and How to stop SPAM Comments.
Hi James! Thank you for your questions! I prefer iThemes security, works great with my Divi websites and hosting company. Never had any issues. 2) I think they could run toghether but I don’t advise that. It could be that it will be causing problems you don’t notice on the short term but then suddenly it appears that you have a huge database because of a logging conflict or something…
Those two tutorials are already here! WP Rocket is here 👉🏻 th-cam.com/video/ekJpyGWOh5A/w-d-xo.html and here is how to stop SPAM comments 👉🏻 th-cam.com/video/R5fXuPxOm7Y/w-d-xo.html have a great day!
@@WPressDoctor Thank Matt,
Do you think it's enough to use the Free version of iThemes Security like you showed in your amazing tutorial or is there any Advantage to use the Paid version? Which isn't cheap = 99$ per year
Hi James! I have not yet found a profound reason to buy te paid version… but I might change my mind if someone from iThemes explains it to me or demonstrated it 🤔
@@WPressDoctor I appreciate that Matt 👍
Thanks for your awesome information! Which security plug-in do you prefer the most, iThemes or wordfense?
Hi again! Thanks for your good question. I personally prefer. iThemes because of the clean interface and the hiding the back end feature. What do you prefer?
Is it true that Ithemes let's in some types of attacks that Wordfence does stop. I had Ithemes security but since I heard that I moved to Wordfence premium... What are your thoughts on that?
iThemes PRO or Wordfence Premium?
> Which one is the best for WooCommerce? 🤔
Hi Erik! iThemes free version will do also perfectly fine. But if you want the PRO features, yeah iThemes it is.
Hi Matt, thank you for this video, I am new and learning. I have a problem, I followed all the step as you explained, but now I am logged out of my WordPress dashboard. I have followed the steps to gain access again but I am met with a 'Page Not Found' error. Please help, how do I regain access?
Hi there! Thanks for your question! At the end of the video I show you exactly how to do this 😀👍🏻 Because your not the only one who has encountered this 😂 Let me know if that works for you!
Why is 775 getting a warning? Love your stuff btw.
Hi Kelly! Learn here everything about it: chmodcommand.com/chmod-775/ but basically it’s a potential security risk for your website. Potential and highly unlikely to be abused. But it’s a risk, that’s why it’s flagged.
@@WPressDoctor You are so generous! Thank you so much. I'll have a look.
Your welcome!
Thanks for the video mate. I was wondering if you knew if WP Mail SMTP requires XML RPC to be enabled?
Hi again! No it works without XML-RPC as far as I know. I have both plugins enabled on some of my websites and also client site, never had any problem. 👍🏻
@WPressDoctor fantastic, thats great news. Thank you so much!
Your welcome!
Awesome video! Quick question: when I run Security Check Pro I get "cURL error 28: Connection timeout after 10000 ms". Any idea how to fix that?
Hi Anna! Well the cURL error is a WordPress REST API issue. The problems arise mostly from your hosting company. PHP version or old cURL version or your hosting company firewall is blocking it... try to ask them first 😊
@@WPressDoctor you are awesome!! :) Thanks so much! That's what I thought, but after chatting with them and trying different things for 1.5h (yes!) we couldn't figure out why. Oh well..
Wow 1,5h 🤔 that’s a thorough help 😀👍🏻 but to bad it didn’t work
Great video! Do you use this plugin as well as wordfence on the same site?
Hi there and thanks for the question! No I only use Solid Security on all my websites. I never use them at the same time, as that could only create problems in my opinion 😁
Thanks for the response. In your opinion, what makes Solid Security better then Wordfence?
The only thing i miss in this plugin is that it not includes malware scan and an advanced firewall. Could you also make an advanced security video: moving wp-config file outside installation, how to avoid /wp-json/ etc.....would be great - thanks
Hi Michael, yes the malware scan is still something they should add to the plugin. Even the PRO version would be great to have it. For this I actually use WordFence once to scan and clean if there is a hacked website. Moving WP-Config is actually a fun idea to implement on the next video about security. Its a bit for the advanced user, but with step by step instructions, everyone could do it 😊
@@WPressDoctor, I had the same question. So, instead of repeating it, just let me confirm I got your point.
Wordfence is too heavy to be used just for malware scanning. So, do you mean you install Wordfence, scan and clean your site for malware, and then delete Wordfence from your site?
For the firewall, I think the hosting provider should play this role better than we do at our website levels. What do you think? If we really need it, I'd go with Cloudflare, which provides great WAF protection.
Yes you got it right Younis! WordFence I only use for one time use when a site has been hacked. It’s not to heavy, it’s just lacks a couple of features I want to have like 2-factor authentication and hiding the backend 😀
@@WPressDoctor the downside of wordfence is that it does not scan the database for malware...
That triggers me, do you have examples of malware infected databases? Like in executable?
Amazing video Matt! I am confused at 13:00, you excluded cache folder onto the right side. However, I don't have cache folder there in wp content. I am using Litespeed cache plugin and it is in the plugins folder. I want to confirm whether or not should I exclude the Litespeed cache plugin? Thank you!
Hi Muhammad and thanks for your question! You indeed should exclude the caching folder. If it’s in the plugin folder, that’s also great to exclude!
@@WPressDoctor Sure will. Thanks for your response.
Ur welcome! Have a great day and stay safe!
which app can protect and remove malware from hosting? if you know please let me know, it will be of great help
Hi there! I have created 3 videos about that topic, here is one: Fix Hacked WordPress Website | A Step-by-step Guide to unhack WordPress
th-cam.com/video/7UoMpX_3c_M/w-d-xo.html I hope it will help you clean your website 😀
Good tutorial! Would be nice if you got rid of that camera shake, otherwise perfect
Hi there! Thanks for the feedback. In my newest video's I have not added it in (only at the beginning) as the camera is always on, in the newest video's in the lower right corner 😊🔥
Hi Matt, do you use both wordfence and itheames on one website? or is it ok to just install either of the two and pay only one plugin? which one do you prefer to use?
Hi again! Great to see you here. Well there is no benefit in using them both at the same tame, so yeah on new website I only use iThemes. I like the interface better and the possibility to change the backend URL is quit nice.
Thanks for the great tutorial. I followed all steps but mybsote still says "Not Secure" up by domain name
Hi there! You are very welcome. That is because you need to get a SSL certificate via your hosting company. Usually this is free, but it has to be activated. If that’s activated and you still have insecure content, it’s because mixed content. Report back here if you have that 👍🏻🤩
@@WPressDoctor Preciate the feedback. I got it resolved and am rolling forward. I have watched a few of your videos...very informative 👍
Good job! Thanks for the compliment 👍🏻
which one is BEST ? itheme or wordfence.
Hi Ahsan, thank you for your question! In daily life I use iThemes on all my own & clients websites. The hide backend feature and the two-factor authentication + a really clean interface is what does it for me 😊
Wonderful tutorial. Now, how do I get rid of being locked out everytime I sign out after renaming the file back to the way it was?
Hi Eric! Thanks! Well That’s not suppose to happen. Why do you get locked out then?
@@WPressDoctor I wonder why and am the admin (created the website). Once I go to file manager and rename it to the way it was before, then sign out. Now, when i try to login in again am looked out till I rename the plugin it. It's irritating.
That’s not supposed to work like that. Try to whitelist your own IP address 👍🏻
It's not banned. How do I whitelist my IP address?
Hmm this might help: ithemes.com/security/fixing-ithemes-security-lockouts/
Hi brother, today I came to your channel for the first time. Just subscribed. Bro, I want a video from you about the difference between the ninja firewall vs iThemes. Which one is better and which one is lacking which feature. No one has created this video to date. My brand name is Khalsa Website Designers and I am currently using Ninja Firewall.
Hi Daljit! Thanks for your kind words, really appreciate it. I’ll add it to my list! Never heard of this plugin before. It’s gonna take some time though, the list is looooooong 👍🏻😀
Hi Matt, when using the hide backend feature I get a 404 not found when using the new login slug, some users can access via the "....hb-token=...." url but others can't even when clearing cache etc, any ideas??
Hi there! If you have a lot of people logging in to your website, don’t bother changing the url slug. It will do more harm then good. Just keep XML-RPC disabled and you have already saved yourself a lot of pain 😀👍🏻
Hi Matt, thanks for the reply! Will having that disabled cause problems when using API keys with the likes on eBay/Amazon?@@WPressDoctor
How does this affect users already in the system if you set this up after you have users?
Hi Thomas and thanks for the question! If they have weak passwords, they need to update it after their login. If you changed the login URL, they need to have the right URL of course also. Besides that, nothing changed 😃
Thank you Matt. At minute 22:34 when you ran the security check pro, my own said that " site does not support SSL" I have ssl certificate and the lock is on in the browser. Do you know why this is the case?
Hi Tatah, thanks for the question. I have responded with a answer on the other iThemes tutorial, can you try this out for me?
can anyone tell me which one is better? wordfence or ithemes?
Hi there and thanks for the question. Well I personally prefer iThemes on all my own and client websites. I only use WordFence for cleaning up….
Matt, when I go to save my settings after changing the login slug, I get a message at the top saying
.theme_compat_slug should match pattern - and then a load of digits, commas etc. Do you know why that is please?
Hi there! Thanks for your question. It seems that your theme or another plugin needs the ‘normal’ url slug for You or your visitors to be able to login… what theme are you using?
@@WPressDoctor Ahh thanks for your quick response. I'm using OceanWP.
Thank you for this video Matt. I have been following you step by step. Heres whats up, I have set up 2fa but everything i try to login, it doesnt ask me for 2fa code, it just takes me straight to my backend. Is this normal? Unlike wordfence, everytime you want to login, it asks you for a 2fa code.
Hm that’s not supposed to happen. Try going into Wordpress native “users” then “my profile” and see if you can turn it on somewhere there 👍🏻😀 let me know if that helps.
🤙🏻 Having a shared hosting and more than 5 websites, should I install this plug-in on each website?
Hi there! Thanks for the question. Yes you should definitely install it on each and every website. It depends on how the hosting is set up (silo’s?) but when they hack one website, they could go to other sites also in the worst case. Make sure to close all gates on all websites!
@@WPressDoctor Since 2 weeks ago all my websites got hacked. Do you have any service to help eliminate these attacks?
That’s not good… well you could try to fix it using this tutorial: th-cam.com/video/DvE7sNtEFg4/w-d-xo.html
Thank you 🙏🏿 for the excellent tutorial but I have a worry. It reduced my website's best practices rating according to PageSpeed Insight from 100 to 83, what maybe the problem? Thank you once again and waiting for your reply
Hi Adonis! Well iThemes should not interfere with your page speed. It has nothing to do with it at all… try emptying all caches and test again 😌
@@WPressDoctor thank for the response. Page speed is not affected but it reduced the “best practice rating”
That’s sounds strange. You sure there is nothing else going on? I will investigate on my own websites, but I have never heard this before 🤷🏼♂️ what theme are you using?
@@WPressDoctor I'm using “Hello“ theme
Thanks for this educative video.
But after I followed all the steps in the video at the end I cant logo again to my wordpress again.
I tried using my correct login details, which I used before the settings no way. And I want to deactivate the plugin because it will affect the settings.
Pls, how can I log in to my WP backend ??
Hi there, Oh that's a frustrating thing. Well actually its easy to fix. Just go to here in the video: th-cam.com/video/P-Mmv-Zv9Hc/w-d-xo.html and follow my steps using free FTP. Let me know if that works!
@@WPressDoctor Thank you great tutor. I will check it.
Let me know if you got it fixed!
@@WPressDoctor
I have gotten the new URL for my WP back end. I login into wp through my cpanel. But my formal login details is not working on the new wp url. How can I get the new login details??
Is the cpanel secure, because someone can still access WP back end through the Cpanel ??
Pls, I'm waiting for your reply on my last message.
If we already have wordfence installed. Do we still need to setup ithemes security plugin?
Hi Ehtesham! Thanks for your good question. If you have installed WordFence thoroughly than no, it’s not needed to install iThemes next to it. Both plugins do kind of the exact same thing (except malware scan and hiding the WP-admin). So your good 👍🏻😀
Ok, this may be a silly question... but I own a haunted tour company. If I'm selling tours through a 3rd party widget on my site, would I be considered E-Commerce, or would this method work? Thanks for doing this tutorial!! Much appreciated!
Hi there! Thats a interesting product 💡. However, you can sell it using e-commerce, no problem. Yes iThemes will protect you then! Does that answer your question?
Thank you! You had said something about watching a different tutorial if it was e commerce so I just wanted to check that I was setting it up with the right info 😁 thanks again for your help!!
Oh yeah I meant this video: th-cam.com/video/SEo3fAk26xk/w-d-xo.html its slightly different indeed. Sorry I now understand you 😀
Thank you! I’ll set up according to that one then 😁
it's not appearing in the Add New Plugin Section... it's not showing the iThemes plugin
Hi Dikshant, that is correct, the name has changed! Check out my newest tutorial: th-cam.com/video/VL5j_YJgnLM/w-d-xo.html
I get a conflit between it and litespeed. How can i fix it
Hi there, thanks for your question. What is exactly the conflict?
I feel after installing this plugin my payment gateway Razorpay is having some issues in order to gather the data using webhooks, is there any way to add some IPs in the whitelist which are provided by the Razorpay team
Hi There! Yes of course you can: docs.contentstudio.io/article/541-how-to-whitelist-your-ips-on-ithemes-security
If you still experience problems you could also switch to WordFence. It has a “Learning mode” so that it will make sure it still works 😀
@@WPressDoctor Thanks for your response
Hope it was useful!
Is it possible to change the set-up once iThemes is already installed? The site I'm building at the moment is likely to have an ecommerce shop added at a later date. So for now it's a brochure website but I'd want to be able to adjust the settings when it becomes transactional. Or would I have to delete and re-install the plugin?
Hi Anna! Yes it’s possible to change the settings in a later stadia. No problem at all! The difference is mainly the security for customers and login for them. Also integrations with your administration software (bookkeeping) and shipment software could maybe use the XML-RPC api, but that totally depends. But you can try that out when you add WooCommerce 👍🏻😀
Hi Matt, cant find iThemes plugin
Hi there! Thanks for the question. It’s because they rebranded it to Solid Security. Here is the new tutorial: Secure Your WordPress Website 2024 | Solid Security Tutorial
th-cam.com/video/VL5j_YJgnLM/w-d-xo.html
Hi Matt. Brilliant video. I am just setting up my WP site using your tutorial. You say that there should never be a user named administrator. So I should create a new user with the administrator role with a different nickname? How can I do that when I only use one e-mail address? :) It says I can't use the same one. Cheers!
Also when Running the Security Check Pro, it says "Your site does not support SSL." - but it does. I activated it in my hosting + using the plugin Really Simple SSL. Do you have an idea about what could be wrong? Thank you very much!
Hi there! Thanks for your questions. Well you really need another e-mail adres to make another user inside your WordPress website. You can make a free e-mail adres using gmail or yahoo or hotmail…
When the lock is there and the SSL certificate works, than you can ignore the settings in Security Check Pro, because it’s alright when the SSL certificate works on your website 👍🏻
@@WPressDoctor Ok, thank you!
Ur welcome!
Bro ,when I clicked on security check pro in end in tool section i got error cURL error 28: connection timeout. Is it serious error or i can ignore
Hi there and thanks for the question. Well this typicality occurs with some hosting plans. You could ignore it for now and try sending it in to your hosting company as a ticket. It might be that they block some connections…
For some reasons the "hide Backend" doesnt work at all for me. Still access from /wp-admin. With the "hide my login" plugin it works right away :-/ any suggestions?
Hi there! Thanks for the question. It has to do with your cookies of the browser. Try to clean caches and then open your website in incognito (private) window. Let me know if that works?
Check file permissions
My first file "/" is also giving a warning. Where did i go wrong?
Hi Kertu! Thanks for the question. When do you see this warning?