WordPress Security Configuration Checklist

🔒 Basic Security Configuration

✅ Keep daily/weekly backup - automated ✅ WordPress Update (twice a month) - 5min

✅ Plugins Update (twice a month) - 10/15 min

✅ Themes Update (make sure you have child theme) - 5min

✅ Update Password - every 3 months

✅ Delete any plugins or themes the we’re not using (twice a month) - 10min

✅ Never use (“admin”, “login”, “administrator”, “user”, “test”) as your username

🛡 Advance Security Configuration

✅ Change Login Path (/wp-admin, /wp-login.php, /admin) (Hide my login)

✅ Hiding username from the author archive URL (functions.php snippet)

✅ Limit login attempts (3/5 - block)

✅ Change file permissions (Server Side) - read/write (hosting support)

✅ Disable file editing via the dashboard (snippet in wp-config.php)

✅ Create Custom Secret Keys for wp-config.php File (link in wp-config.php)

✅ Using Google Re-captcha in all Forms to prevent spams (CleanTalk - paid)

✅ Change the Database Prefix (default wp_)