Security tip
- Always update WordPress, plugins, themes and PHP and don’t use plugins or themes that are abandoned.
- Use a password manager tool to maintain unique and strong passwords for your Administrator accounts.
- Regularly check your site for plugins, themes or (administrator) users that are no longer in use, and delete them.
- Perform the Qualys SSL Labs scan via their website or the integrated scan in Really Simple Security. Anything below an A score is a reason to reconsider your hosting provider.
- Scan your security headers configuration via the Security Headers scan!
- The Free Cloudflare plan provides DDoS protection against no cost.