It goes without saying that securing your website is extremely important. Below are some best practice tips for securing your website and helping to avoid a hacker ruining your day.
- Use the most secure file and folder permissions possible, if your site can run with the read-only set then it should otherwise only enable write permission of files or folders that explicitly need it e.g. Uploads folder.
- Use complex passwords with 8 characters or more and containing numbers and special characters, use of a secure password generator like that comes with the free LastPass browser plug-in can make generating and storing these passwords much easier.
- If you are using one of the popular open-source website apps like WordPress or Joomla always keep it up to date and don't forget any third-party plug-ins you might use which are commonly the attack vector used by hackers.
- Do a security audit of your website, we offer security audits for a small fee and they can save you time understanding where your site may be lacking is security.
- Change passwords regularly.
- Store website files that do not need to be accessed directly by a web browser below the webroot folder.
