Ironclad Website Security
Top 5 Trade Secrets
#1 Keep WordPress Updated
WordPress automatically enables minor updates, but they don’t enable major updates because they don’t want to break anything.
With the way I build websites the major relases never break then so I have all my sites set to automatically enable the updates.
I monitor the wordpress releases just to make sure. They only do a major release about once a quarter and they disclose them ahead of time so it is easy for me to make sure they won’t break anything.


#2 Strong Passwords & Permissions
If you can remember your password then it probably isn’t strong enough. I know it is a pain to deal with complex passwords and use different ones for all the different services but that is the world we live in.
Also on the topic of permissions – a lot of people will add somebody to their wordpress and forget to remove them. I help with that and I make sure anybody who needs access only gets the most minimal access they need.
#3 High quality hosting
One of the benefits of paying the extra $15 a month for premium hosting is that you automatically get a lot of security benefits.
Basically these are things that are so complicated you won’t understand them unless you work with website security, but here is a list if you are curious.


#4 SSL By Default
SSL means that your website traffic is encrypted between the users device and your server. This has become the industry default.
All my sites have free SSL and I force any visitor to visit the site through SSL even if they somehow try to bypass it.
#5 Regular Backups
Another feature of the premium hosting I use is that they take a daily backup of the website.
That means that if anything goes wrong I can just click a button and go back to a version of the website from a previous day.
This is basically a fail safe in the event that accidents happen.