5. Set your password to âincorrectâ.
So when you key in wrongly, the
computer will tell you
âYour password is incorrect.â
6. Set a Strong Password
âą password
âą 123456
âą 12345678
âą abc123
âą qwerty
âą monkey
âą letmein
âą dragon
âą 111111
âą baseball
âą iloveyou
âą trustno1
âą 1234567
âą sunshine
âą master
âą 123123
âą welcome
âą shadow
âą ashley
âą football
âą jesus
âą michael
âą ninja
âą mustang
âą Password1
Source: http://gizmodo.com/
25 most common passwords (2012)
7. Set a Strong Password
âą Mix uppercase, lowercase, numbers, symbols.
âą Balance âsecureâ and âeasy to rememberâ.
âą E.g. Queenstown street 45, blk 700 #17-44 â
Qb700#17_44
âą E.g. Imagination is more important than
knowledge (Albert Einstein), born 1897 â
iimitk*AE*1897
8. Set a Strong Password
âą Or use a password manager
â KeePass
â 1Password
â Roboform
â LastPass
â ⊠many more
11. Donât use âAdminâ as username
If you already have âadminâ as username:
1. Log in as âadminâ.
2. Create a new administrator account using a
different username.
3. Log out of âadminâ.
4. Log in using the new account you created.
5. Delete the âadminâ account. You can attribute
the existing posts to the new account.
12. Donât use âAdminâ as username
Preferably:
1. Donât use a dictionary word.
2. Donât use popular names.
3. Donât use your name.
15. Use a Different Table Prefix
If you already have âwp_â as the database
prefix:
1. I know, no plugins butâŠ
http://wordpress.org/extend/plugins/change
-table-prefix/
2. Or if you want to do it yourselfâŠ
http://www.wpbeginner.com/wp-
tutorials/how-to-change-the-wordpress-
database-prefix-to-improve-security/
17. Set Proper File Permissions
âą Best practice:
â All files â 644 or 640
â All directories â 755 or 750
â wp-config.php â 400
âą Usually can be set using an FTP program, or
web hosting control panel.
27. Keep all files up to date
âą 3 things to keep updated:
â WordPress core
â Plugins
â Themes
âą Done quickly thru the WordPress backend!
âą Remove unused files â themes, plugins etc.
âą Remember to do a backup before performing
doing an update!
28. Conclusion: 7 Ways
1. Set a Strong Password
2. Donât use âAdminâ as username
3. Use a Different Table Prefix
4. Set Proper File Permissions
5. Hide WordPress Info
6. Update your secret keys
7. Keep all files up to date