WordPress Security Tips - Unsecured WordPress Login Page
(Page 4 of 5 )
By default, any hacker can do a "brute force" hack of your Word press login page. If you do not know what this method is, it is simply trying any password combination possible for your username and password automatically until they can log into your site.
Luckily, there are two great ways to correct this weakness:
Extremely strong passwords.
Limiting login attempts to your login page by locking down unusual login activity.
WordPress allows the strongest passwords possible in their login page, and will be able to accept stronger passwords than PayPal or HSBC banking! This type of commercial online service accepts a maximum of 20 characters only, while WordPress accepts more.
Then why it is insecure? It is because WordPress transmits passwords unencrypted to the Internet, though having extremely strong and long passwords can make the work of hackers more complicated.
If you like to create ultra-high security passwords, I recommend this web site: https://www.grc.com/passwords.htm
Now here is the most important part: login lockdown. This is a perfect countermeasure to brute force. A login lockdown can lock the login of your WordPress admin login page after a chosen number of unsuccessful attempts.
You can download a very useful login lockdown plug-in by Bad Neighborhood: http://www.bad-neighborhood.com/login-lockdown.html
You can also view the IP address of the hacker as shown by the IP lockout reports. You can later put this on your .htaccess to restrict site access using IP addresses.
Next: Unsecured Forms and Plug-ins >>
More Blog Help Articles
More By Codex-M
