SEO and SECURITY with Rambabu Thapa - Protect your website from hackers - Episode 9

In this podcast, we'll discuss why security is important for your website SEO and how you can keep your website secure.

I will share a checklist at the end.

WordPress Security Configuration Checklist

🔒 Basic Security Configuration

✅ Keep daily/weekly backup - automated  ✅ WordPress Update (twice a month) - 5min

✅ Plugins Update (twice a month) - 10/15 min

✅ Themes Update (make sure you have child theme) - 5min

✅ Update Password - every 3 months

✅ Delete any plugins or themes the we’re not using  (twice a month) - 10min

✅ Never use (“admin”, “login”, “administrator”, “user”, “test”) as your username

🛡 Advance Security Configuration

✅ Change Login Path (/wp-admin, /wp-login.php, /admin) (Hide my login)

✅ Hiding username from the author archive URL (functions.php snippet)

✅ Limit login attempts (3/5 - block)

✅ Change file permissions (Server Side) - read/write (hosting support)

✅ Disable file editing via the dashboard (snippet in wp-config.php)

✅ Create Custom Secret Keys for wp-config.php File (link in wp-config.php)

✅ Using Google Re-captcha in all Forms to prevent spams (CleanTalk - paid)

✅ Change the Database Prefix (default wp_)

✅ Hide Your WordPress Version

✅ Protect Critical Files wp-config.php, .htaccess, etc (no read/write permission)

✅ Install and Configure WordPress Security Plugin (WordFence(free), Sucuri….) - 20min

✅ Scheduled Backup of WordPress Website - automated

✅ Automatic Email notification for Security and Updates - 5min


WordPress Security Configuration Checklist