Beginner's Tutorial: WordPress Website Security Settings

WordPress is a blogging program used by many people. So after building a website, how do you protect the security of the website? Here are some tips for safe setup.

1. Use a strong password with a length of more than 8 digits and a mixture of uppercase and lowercase characters, such as ~ ! @ # $ % ^ & * ( ) _ + [ ] { } ' ” < > ? / . ,
Change your password every 4 months or so

Do not use passwords such as your name, birthday, 1234567, 88888, etc.

2. Upgrade WordPress to the latest version. After each WordPress upgrade, upgrade your own program as well.
You can upgrade directly in the background.
I didn't back up enough data during the upgrade, so it didn't happen.

3. Upgrade the plug-in to the latest version

4. Prohibit new user registration

5. Use robots.txt
User-agent: *
Allow: /wp-content/uploads/
Disallow: /cgi-bin/
Disallow: /feed/
Disallow: /trackback/
Disallow: /wp-admin/
Disallow: /wp-content/
Disallow: /wp-includes/
Disallow: /xmlrpc.php
Disallow: /wp-
Allow: /wp-content/uploads/
Sitemap: http://yourdomain.com/sitemap.xml

Original article: How to secure WordPress website