Agar aap WordPress ka use Kar rahe hai to aapko apne site ke security ke bare me sochna chahye. Aisa nahi hai ke WordPress kisis dusre platform ke comparison me zyada ya kam secure hai, lekin users ke numers, plugins aur third party add-ons ise attackers ke liye ek common target banate hai. Aapko pareshan hone ki zaroorat nahi hai yaha pe kuch WordPress security tips bataye gaye jiseuse kar ke aapko apne WordPress Security ke pareshan hone ki zaroorat nahi hai. To chalye jante hai hum WordPress security tips and tricks ke bare me.
Recent time me WordPress ko hackers dwara highly target kiya hai. Aur yahi wajah hai ke bahut sare users ye janna chahte hai ke kya WordPress secure hai.
Jaisa ke humne aapko pahle hi bata diya hai ke WordPress dusre platform se na zyada aur na kam secure hai. Dusre platform ki tarah ye bhi by default secure hai. Lekin jub aap ise unsecured server pe host karte hai ya themes ya plugins ko new code ke form me add karte hai to aapke hack hone ke chances badh jate hai.
1. Don’t use ‘admin’ as a username
Zyadatar WordPress ‘hacks’ aur attacks brute-force ke zyada aapke password ko guess karne aur admin me apna rasta banane ke alawa kuch khas nahi karte hai.
Unke liye aisa karna bahut aasan hai agar unhe aapke user name ko guess karne ki zaroorat nahi pari to. Agar aap common user name (like Admin) ka use nahi karte hai to brute-force attacks bahut kam effective ho jata hai.
Agar aapke kisi old site pe pahle se hi ‘admin’ user hai to aapko apne is account ko delete karne aur apne content aur access ko zyada secure username pe transfer karne ki zaroorat hai.
2. Complex Password Use Kare
Agar aap ek accha password dalte hai to aise password ko guess karna ya brute-force karna bahut mushkil ho jata hai.
Lekin hamare liye longer, unique passwords ko yaad rakhna mushkil ho jata hai. Isliye aise condition me aapko tools 1Password aur LastPass jaise tool kaam aayenge. Ye dono ek password generator hai.
Aap required length type karenge aur ye aapke liye password generate kar dega. Aap link ko aur password ko save kare aur badhe. Aap kitna secure password chhate hai ispe depend karte huye aap long password (around 20 characters) set kare uske sath hi aap less usual characters jaise * ya # ka use kare.
3. Add two-factor authentication
Agar aap apne user name me admin ka use nahi karte hai aur aapka ek strong, randomly generated password bhi hai, tab bhi brute-force attack aapke liye ek problem ho sakta hai.
Aapko pareshan hone ki zaroorat nahi hai two-factor authentication apke site ko protect kar sakta hai.
Iska main principle ye hai ke aapko sirf apne login detail ko enter karne ke sath hi kisi dusre device me aane wale code ko bhi aapko login karne ke liye enter karna hoga, jise attackers ko fake karna mushkil hoga.
WordPress me authentication ko handle karne ke liye do popular pluging Google Authenticator and Rublon Plugin hai. Bus aap is baat ka dhyan rakhe ke aap ackuo code ko na khoye.
4. Reliable Aur Secure Hosting Company Ka Use Kare
Aapka WordPress Installation ek software hai jo server pe installed hai. Server secure website ka foundation hai, jo aapko ye ensure karta hai ke ke aapki site kisi hacker se secure hai.
Ek secure WordPress hosting me usually
- DDOS attacks ko kam karne ke liye Server level firewall kiya jata hai.
- Physical security ke liye latest hardware aur top-notch data center ka use kiya jata hai.
- Operating system ko regularly update kija jata hai aur latest security patches ko apply hota hai.
- Malicious activity ya policy violations ke Intrusion detection systems hota hai.
Aapke liye ye jaan pana mushkil hoga ke kaun si company hackers ke against reliable hai. Isliye humne aapke mushkil ko aasna karne ke liye secure WordPress hosting companies ki ek list tayyar ki hai:
- SiteGround: Ye ek award winning hosting hai jo well-known attack ko rokne ke liye anti-bot AI system ka use karta hai.
- Bluehost: Ek top rated host hai jo aapko ek behtareen security provide karta hai.
- Kinsta hosting: Ye high traffic wale WordPress blog ke liye perfect hai.
- WPEngine: Ye business WordPress sites ke liye perfect hai Ye multiple levels me backups aur security security provide karta hai.
5. WordPress Ka Latest version Use Kare
WordPress blogger ke liye WordPress software ko up to date rakhna basic security tips me se ek hai. Ye ek aise chiz hai jise aapko kabhi bhi miss nahi karna chahye.
Jub kabhi bhi WordPress ka koi update aata hai to iska matlab hai ke WordPress ne kuch bugs fix kiya hai, kuch feature add kiya hai, aur sab se zyada important ke kuch security features ko add aur fix kiya hai.
Jub kabhi bhi aap update ke message ko dekhe to aapko apne WordPress ko update karna chhaye.
Is baat ka bhi dhyan rakhe ke aapke theme aur plugins WordPress ke latest version ke sath compatible ho.
6. WordPress Folders File Permissions
Apne cPanel me File Manager me jaye aur apne WordPress folder ke file attributes ko check kare.
Agar wo 744 (read only) me hai to ye accha hai. Aur agar ye 777 me hai to aap apne aap ko lucky samajhye ke aap abtak hack nahi huye hai.
Agar aap apne hosting ko change karte hai to aapka file permission bhi change ho jata hai. Is liye aapko apna hosting change karne ke baad aapko pane file permission ko verify karna chhaye.
7. Change WordPress Login URL
WordPress login URL page ko change kar ke aap bahut sare attacks aur hacking attempt ko rok sakte hai. Specially agar aap aise log hai jiske pass bahut thore se log hai ya aapko sirf WordPress dashboard pe login karne ki zaroorat haito aapko login page ko chnage karne se bahut help milega.
8. Indexed pages Ke Liye Google Alert Set Kare
Ye ek kam jana jane wala trick hai jise aap use kar sakte hai. Aaap Google alert set kar sakte hai ke Google jub bhi aapke domain nameke new pages ko index kare to aapko aler aaye.
Bahut baar aisa hota hai ke WordPress hackers new pages aur posts add karte hai jo backend ya frontend me nahi dikhaye jate lekin ye Google me index ho jate hia.
Agar aapne aler set kiya hoga to agar kuch bhi aapke notice ke baghair hoga to aap use jaan jayenge. Alert set karna bilkul free hai aur aap ise 2-3 minute me set kar sakte hai.
Aap in steps ko follow kar ke easily alert set kar sakte hai.
- Google alerts Pe jaye
- “create an alert about” field me site:domain.com add kare
- How often ko “as it happens”, me change kare language ko “any language” me aur how many ko “all results’ me change kare.
A jub kabhi bhi aapka new page index hog to aapko instant notifications receive hoga.
9. WordPress Version Ko Hide Kare
Agar aap apne WordPress ko update nahi karte hai to aur aapke WordPress ka version bhi visible hai to aise condition me aap hackers ko ye mauka de rahae hai ke wo us version ke security lack ka fayda utha ke aapke site ko hack kar sake.
Agar aap WordPress ka old version use kar rahe hai aur ye visible bhi hai to aap ke site ke hack hone ke chances bahut hai.
Ye the WordPress security tips ke kuch important point jinhe use kar ke aap apne site ko secure kar sakte hai.
Also Read: Important WordPress Terms
Ummid hai aapko WordPress security ka ye article (WordPress security tips) informative lagi hoga. Agar aapka koi swaaal hai to aap humse comment section me pooch sakte hain. Apke liye ye (SEO in Hindi ) course design kiya gya hai, Is Website pe apko WordPress aur SEO Complete Course Hindi me mil jyega, Agr aap WordPress se related videos dekhna chahte hain to aap hmare WP Seekho YouTube Channel par bhi visit kar sakte hain.