I think it’s always a good idea to change the default login to something different. It’s not going to make a huge difference, but is worth implementing. 👍
Care to elaborate as to what you mean? I'm thinking of doing a follow up video covering the basics, so I would be interested to hear what you are referring to specifically.
Hi Paul, love your videos! On the topic of security and site stability, what would your advice be for plugins that are required to be updated (due to possible security vulnerabilities), can take down your entire site? I've dealt with cases where updating Elementor (or third party plugins depended on Elementor) would cause critical errors and I have no other choice but to restore my site. This is possibly the most frustrating thing about WordPress for me, and I've come to a point where I simply wouldn't update Elementor or Elementor-based plugins as it always causes this error.
I think you're feeling the pain of the Elementor/WooCommerce update cycle. I think there are only 2 ways to realistically handle them. For major releases (i.e. 3.7, 3.8, etc.,) I could generally hold off updating for a couple of days as there are usually bug releases released very quickly as issues come to light. I would also always recommend a solid pre-update backup plan. I use WPVivid Backup Pro and the incremental updates option to automatically backup the changes (not the entire site) when plugins or themes are updated as that allows me to quickly rollback those changes without having to restore the entire site. It's normally quick and pretty painless. I would also recommend using a staging site to test big updates to ensure you don't have issues before rolling out to the live site (still using a backup option). Apart from that, this is one of the reasons so many people get frustrated with WordPress and the whole plugin/theme format as it does require a lot of ongoing maintenance and processes to handle the potential for issues.
Should we use different plugin for different security task such as loginizer, wps hide login, limit login attempts, recaptcha, 2FA, etc because I heard that all in one feature security plugin like wordfence and ithemes slows down the website, is that true? any recommendations??
Very informative video. Love discovering new plugins like this.
Thanks Paul for sharing
Great video. Thanks a lot
Hi Paul, thanks again. What is your opinion about a plugin to change the url of the wp-admin login?
I think it’s always a good idea to change the default login to something different.
It’s not going to make a huge difference, but is worth implementing. 👍
Very good work!!!!
Why noone ever speaks about security headers when it comes to wordpress security?
Care to elaborate as to what you mean? I'm thinking of doing a follow up video covering the basics, so I would be interested to hear what you are referring to specifically.
Hi Paul, love your videos! On the topic of security and site stability, what would your advice be for plugins that are required to be updated (due to possible security vulnerabilities), can take down your entire site?
I've dealt with cases where updating Elementor (or third party plugins depended on Elementor) would cause critical errors and I have no other choice but to restore my site. This is possibly the most frustrating thing about WordPress for me, and I've come to a point where I simply wouldn't update Elementor or Elementor-based plugins as it always causes this error.
I think you're feeling the pain of the Elementor/WooCommerce update cycle.
I think there are only 2 ways to realistically handle them. For major releases (i.e. 3.7, 3.8, etc.,) I could generally hold off updating for a couple of days as there are usually bug releases released very quickly as issues come to light.
I would also always recommend a solid pre-update backup plan. I use WPVivid Backup Pro and the incremental updates option to automatically backup the changes (not the entire site) when plugins or themes are updated as that allows me to quickly rollback those changes without having to restore the entire site. It's normally quick and pretty painless.
I would also recommend using a staging site to test big updates to ensure you don't have issues before rolling out to the live site (still using a backup option).
Apart from that, this is one of the reasons so many people get frustrated with WordPress and the whole plugin/theme format as it does require a lot of ongoing maintenance and processes to handle the potential for issues.
Should we use different plugin for different security task such as loginizer, wps hide login, limit login attempts, recaptcha, 2FA, etc because I heard that all in one feature security plugin like wordfence and ithemes slows down the website, is that true?
any recommendations??
What about cdn and their security features ? They are immensely cheaper than ithemes security
why pay 1 gbp/mth for a pass manager when you have at least 3 of them freely available on your pc right now and comes free with ur browser?
what about wordfence
The title should be "7 Tips for Beginners who doesn't have a clue what they are doing with their life to Secure your WordPress Website"
Love your positivity! 🤦♂️
What do you recommend on this topic? What are the most important considerations in your opinion?
Excuse me for not being God like you, maybe you have got born knowing everything