Best practices: why you must use a security plugin on your WordPress website

One of my websites is being bombarded this morning by hackers trying to get in. They keep failing and we’re at 226 lockouts so far. (240 by time I finished writing the Facebook post and currently at 268!!)

Image shows email inbox with notifications from WP Cerber on the number of lockouts it has blocked from hacking attempts this morning

THIS is why you MUST have a security plugin installed and configured properly on your site AND why you must keep your site up to date.

Keeping your site up to date includes WordPress core, ALL installed themes (not just the active theme!), and all installed plugins (again, not just active plugins).

You should also never use questionable plugins or themes – especially from unverified sources. Many of them contain malicious code that can damage your website and backdoors for hackers. Always, always, always get themes and plugins directly from the developer’s website.

There are several good security plugins on the market like Wordfence, Defender, and WP Cerber, which I use for most of my sites and client sites. WP Cerber also includes a spam filter for comments and forms.

The base plugin of both Wordfence and WP Cerber are free and you can upgrade it if you need more features but the base plugin is adequate for most sites.

Or you can also install a spam plugin like Akismet (from the makers of WordPress) or CleanTalk, which you will need if you’re using a security plugin that does not include spam filtering. Again, both have free and paid versions but often, the free version is enough for most sites.

All of this gibberish to you? I can help!

Design. Build. Brand. offers monthly website maintenance plans and ‘techie bits’ help at reasonable prices! We love helping you keep your site updated and running smoothly.

For info on Monthly Maintenance Plans, see our Maintenance Plans page.
And to get help with the Techie bits, head over to the Techie Bits page.

(Final tally of lockouts in the last 24 hour period: 371 as seen in the screenshot below!!)

Image showing 371 total lockouts in the last 24 hour period
Posted in:
Tagged with:
Photo on 6-23-18 at 1.53 PM

Hi, I'm Annie. . .

"Your instructor for How to Build a Course on WordPress as well as the one behind this website. I'm a graphic designer and web developer with over 25 years experience. I've been working with WordPress since 2005, have spoken at WordCamp Seattle and other local venues, and specialize in building course and membership sites for my clients.

Build Your Course on WordPress


You've probably heard about course building platforms like Kajabi, Teachable, Thinkific, and others, but did you know you can also build your course on your WordPress website?

Yes, you sure can! There are a host of LMS (Learning Management System) plugins out there. And in this course, I'll share all my tips and tricks with you to find the right one for your needs and then walk you through building your course from beginning to end.

Join the conversation. . .

Get the Newsletter & Other Goodies in Your Inbox

"5 Ways to Get Leads & Clients"

You can unsubscribe anytime. Your info is safe with MRDCo.

Something went wrong. Please check your entries and try again.