![\"Image](\"https:\/\/www.gravityforms.com\/wp-content\/uploads\/2020\/01\/5-WordPress-Security-Tips-to-Protect-Your-Website.png\")
<\/p>\n<\/p>\n
You may think your website has no appeal to hackers, but think again: On average, <\/span>30,000 websites are hacked every day<\/span><\/a>, allowing cyber criminals to distribute malicious codes to website visitors and obtain sensitive information from your clients and customers. WordPress now powers <\/span>34 percent<\/span><\/a> of the Internet, making it one of the most popular CMS platforms, but this popularity means that hackers have had a lot of practice finding the platform\u2019s vulnerabilities thanks to automated software and tried and tested techniques. <\/span><\/p>\n To keep your website from being compromised, here are five tips to combat the most common WordPress security issues, as well as the best WordPress security plugins to keep your site safe.<\/span><\/p>\n <\/p>\n You may get annoyed with the complexity of some password requirements\u2014upper and lowercase letters, numbers, a symbol, a minimum number of characters\u2014but these requirements ensure no hacker makes the right guess when trying to access your website. Every year, SplashData compiles <\/span>a list of <\/span><\/a>the most common passwords, and every year the same three top the list: <\/span>123456<\/span><\/i>, <\/span>password<\/span><\/i>, and <\/span>12345678<\/span><\/i>. And the most common username? <\/span>Admin. <\/span><\/i><\/p>\n Even if you think that having a unique password is enough, having a unique username makes your site doubly secure. With every character you add to your login credentials, the guesses that hackers or hacker bots have to make only increases. After all, hackers are rarely actual people\u2014instead they are automated tools used in <\/span>brute force attack<\/span><\/a>, a cyberattack that is capable of guessing various password combinations within mere moments.\u00a0<\/span><\/p>\n In addition to choosing a strong username and password and changing your password frequently, consider a plugin like <\/span>iThemes Security Pro<\/span><\/a>, which features brute force protection and strong password enforcement.<\/span><\/p>\n Even if you have taken extra precautions to keep your site secure, you should always run regular backups. This can be a lifesaver\u2014not only in the case of getting hacked but also if you lose data for any reason, such as while updating the site or installing a plugin. <\/span><\/p>\n The key to deciding how often you should back up your site is how often you make changes. If you update on a regular basis, you can use plugins like <\/span>BackUpWordPress<\/span><\/a> or <\/span>VaultPress<\/span><\/a> to back up daily or even <\/span>back up your site manually.\u00a0<\/span><\/p>\n Although plugins can be extremely useful, having too many of them can slow down your site and even make it more vulnerable to hackers. Inactive or outdated plugins <\/span>leave your site open for hackers<\/span><\/a> to inject scripts with malicious code, either redirecting users or harassing them with unwanted pop-ups. <\/span><\/p>\n If you\u2019ve stopped using certain plugins, get rid of them while updating the plugins you continue to use. It\u2019s also important to be suspicious of new plugins\u2014especially free ones, which may not offer the best security measures.\u00a0<\/span><\/p>\n An easy WordPress security measure you can take is upgrading your site to HTTPS, which encrypts the connection between your web browser and your web server, shielding your site from hackers while you transfer data from one server to another. <\/span><\/p>\n Switching to HTTPS also protects your site from unreliable hidden scripts available on your computer system, as well as a script that is used to steal data from login forms. Simply follow <\/span>this tutorial<\/span><\/a> to upgrade to HTTPS.<\/span><\/p>\n What if you follow all the right measures, update all your plugins, and still get hacked? If you can still access your WordPress dashboard, install <\/span>WordFence<\/span><\/a> and run a scan. It will provide a tally of the threats it found and sound recommendations, which you can perform at the press of a button. If you\u2019re still having issues, contact your host and see what they can do from their end. Luckily, if you ran that backup, you will at least have your data saved.\u00a0<\/span><\/p>\n Don\u2019t let the threat of hacking stop you from getting the most out of your website. But remember, keeping your website secure is an ongoing process. Follow these tips and resolve any bugs that seems suspicious to you, and you can be sure that cyber criminals will stay far away.\u00a0<\/span><\/p>\n Security is one of the top priorities at Gravity Forms and we are proud to be one of the most secure form builders in the industry. Along with fine grained user permissions, anti-spam protection, file upload security, and sanitization of submitted data, we also regularly have our code reviewed by an independent auditor. <\/span><\/p>\n We feature automatic and background updates, so when enabled, Gravity Forms will be updated automatically without you needing do anything on your end. Otherwise, you\u2019ll see a notification on your WordPress dashboard to upgrade when a new release is available. Read more about our security best practices <\/span>here<\/span><\/a>.<\/span><\/p>\n <\/p>\nChoose a Strong Password and Change It Often<\/span><\/h2>\n
Run Backups<\/span><\/h2>\n
Limit Your Plugins and Update the Ones You Have<\/span><\/h2>\n
Upgrade to HTTPS<\/span><\/h2>\n
Know What to Do If You Get Hacked<\/span><\/h2>\n
\u00a0<\/span>A Note About Gravity Forms and Security<\/span><\/h2>\n
![\"Gravity](\"https:\/\/www.gravityforms.com\/wp-content\/uploads\/2020\/06\/Gravity-Forms-Newsletter-1.png\")
\nIf you want to keep up-to-date with what's happening on the blog sign up for the Gravity Forms newsletter!<\/strong>
\n\n <\/div>