Keeping your WordPress installation is usually not something a lot of people spend a lot of time on. However, I believe WordPress security, tightening up the place should be your first priority every single time you install WordPress. No exceptions.
With the recent Pharma hack, more info about it plus a solution on Chris Pearson’s blog, going around I thought it was time to focus on WordPress security today. There are a lot of things you can do build extra layers of security for your WordPress installation.
There are a few different layers involved to secure your WordPress installation. I shall list them grouped together as much as possible.
Server-side & .htaccess
WordPress security starts of course by using a proper hosting company. If a server setup is not secure by default then no amount of security measures is going to keep unwanted visitors out. Please look around before you decide which hosting partner will work best for you.