Passwords, Attakcks, and Security, oh my!

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Michele Butcher 
valet.io
GiveWP.com yoast.com
Passwords, Attacks, and
Security oh my!
@michele_butcher

Michele Butcher
• Accounts Lead at Valet.io
• Support Engineer for Yoast
• Support Guru for GiveWP
• Beginners and Interme...

Why is security important?
@michele_butcher

Many do not think security is
important until it is too late.
Every single day hackers ﬁnd new ways to get your informatio...

Why do hackers hack?
• Make bank
• build a zombie
army
• Share their nasty
code with the world
• Get your
information
• Th...

But…Why are they hacking
me?
There is rarely ever a targeted hacking attack.
Typically all sites are considered targets. T...

And how do they get in?
• They guess your login information
• Denial of Service Attack (DDoS)
• Through a ﬁle in a theme, ...

Here is the only scary thing I
will say in this talk
@michele_butcher

You are NEVER
100% secure
@michele_butcher

A test site or a site that might get
5 visitors a day can be hacked.
It happened to me and it can happen to you.
@michele_...

Don’t Let
Security Make
you like this guy!
@michele_butcher

There are some simple steps
to keep the hackers out
@michele_butcher

WordPress Security Basics
101
@michele_butcher

Never ever never use “admin” as a
username or “password” as
password. NEVER!!!!
Any questions?
Adm1n and Pa55w0rd do not c...

Always use SFTP
“S” is for safe!!!
@michele_butcher

Only give users the access
they need
Just because they want to be an admin does not mean they should.
Guest bloggers shoul...

If it is a temporary login, delete
the user when the job is done
If they do have posts, you can convert them to different ...

Set up ﬁle detection
Many security plugins like iThemes Security and WordFence will alert you when
ﬁles have been changed
...

Only keep the theme you are using
and one backup theme on your
site.
The more themes that are on a site, the more open cha...

Only keep the plugins you
have active on your site.
An uninstalled plugin is not a potential vulnerability.
Use the plugin...

Security Plugins
• iThemes Security (Free and Pro version
• Sucuri Firewall
• WordFence Security
• Jetpack with Brute Prot...

Always make backups!
• Backup Buddy, UpDraftPlus, BackWPUp
• Always save to someplace OTHER than your server
• Save them t...

Malware Scanning? Do I
need it?
• Google Webmaster Tools 
• Sucuri Scanner 
• VirusTotal
If you feel your site could be in...

What else can I do to protect
my site?
@michele_butcher

Update!
Update!
Update!
Update core. Update themes update plugins!
The biggest reasons of updates is typically security or...

If you use Envato products (ThemeForest
and CodeCanyon) always check the box in
the downloads to be notiﬁed of updates.
Th...

Don't ever let your site get
too lonely.
That is when the zombies come.  
Nobody wants the zombies to come
@michele_butcher

If the unthinkable happens and you
do get hacked, it is not the end of
the world.
It can and will be ﬁxed.
@michele_butcher

Who can clean my hacked
website?
• Sucuri 
• Hack Repair 
• Wp Security Lock
@michele_butcher

Great! Are there any other
ways I can be secure?
@michele_butcher

Always use complex
passwords
@michele_butcher

Never email passwords
@michele_butcher

Never use the same
password twice
@michele_butcher

Use a Password Keeper
• Last Pass
• One Password
• KeePass
@michele_butcher

If a login has a Two-Factor
Authentication, USE IT!
@michele_butcher

Anti-virus!
Use it on all the things.
Yes, even a Mac!
http://mlb.pw/secure @michele_butcher

Be conscious when using
public WiFi
@michele_butcher

Use a VPN if you use Public
WiFi
• Torguard
• Cloak (Mac only)
• Site Social
• Hide My Ass
@michele_butcher

Update!
Update!
Update!
@michele_butcher

Back everything up and back
it up often!
No one wants to lose their information
stored on their computer.
• Bitcasa
• Caro...

Questions?
@michele_butcher

Thank you!!!
Michele Butcher
@michele_butcher
Slides can be found at

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

Teresa Lane - Content Modeling - Wo... by Teresa Lane 1637 views
Getting to Know Underscores by Jason Yingling 1635 views
Building a Simple Project Plan for ... by Lucas Lima 2746 views
Ryan Markel - WordCamp StL 2016 - C... by ryanmarkel 3341 views
How to Make the Most out of Yoast SEO by Nile Flores 27337 views
Automating WordPress Plugin Develop... by Mike Hale 2247 views

View on Slideshare

1 of 42 Ad

View on Slideshare

1 of 42 Ad