Not a member? Sign up

Using WordPress? Checklist helps keep it secure

by: Amy Gahran |

WordPress is a very popular content management system for community news/info sites. But since it's free and open source, it's also a popular target for hackers. Here are some common WordPress security myths, and a checklist for securing your WordPress installation.

WordPress security expert Anders Vinther published a list of 10 common myths about WordPress security, with links to more details:

  1. WordPress is not secure.
  2. Nobody wants to hack my blog.
  3. My WordPress site is 100% secure.
  4. I only use themes and plugins from wordpress.org so they are secure.
  5. Updating WordPress whenever I log in is cool.
  6. Once my WordPress site is setup my job is finished.
  7. I'll just install xyz plugin and that'll take care of security for me.
  8. If I disable a plugin or theme, there is no risk.
  9. If my site is compromised I will quickly find out.
  10. My password is good enough.

Have you caught yourself saying or believing any of these things about your community site? If so (or even if not), you might want to download Vinther's free WordPress security checklist.

Working through the steps in this checklist takes about five hours total -- but that time is well worth the effort if you want to protect your site and make sure it stays protected. The tasks don't all have to be completed in one sitting; you can do them over a few days if you like.

Subscribe to the Newsletter

Amy Gahran

Amy Gahran is a journalist, editor, trainer, entrepreneur, strategist, and media consultant based in Boulder, Colorado. In addition to writing
Read More

Events
Submit an event

Leading Change Summit

September 3, 2014 - September 6, 2014

Engage with diverse voices to ignite new ideas. Activate your strategies with expert advice and planning tools. Change the way you create impact. All at NTEN's inaugural Leading Change Summit.

ASNE-APME 2014: Fast Forward

September 15, 2014 - September 17, 2014

The first joint conference of the American Society of News Editors and Associated Press Media Editors.

Collab/Space Chicago, September 24

September 24, 2014 - September 24, 2014

An all-day, hands-on workshop focused on media innovation and spotlighting cutting-edge media startups –  in the Chicago area and beyond. 

Online News Association 2014 Conference

September 25, 2014 - September 27, 2014

A rare opportunity to network face-to-face, and share best practices with peers from all over the map at the ONA annual conference in Chicago.

New Avenues in Journalism

October 10, 2014

To help independent writers negotiate the changing terrain of journaism, ASJA is bringing thought leaders and innovators to San Francisco for a two-day conference

LION Summit: Innovation for Local Digital Media Entrepreneurs

October 16, 2014

Local indie publishers and industry experts will convene in Chicago for the second LION Publishers Summit.

American Library Association Midwinter Meeting

January 30, 2015 - February 3, 2015

Registration is now open for the ALA meeting, which will be held in Chicago.

Nonprofit Technology Conference

March 4, 2015 - March 6, 2015

The NTC is the nonprofit industry's signature technology event, bringing together more than 2,000 nonprofit staff, vendors, and consultants. 

Sunshine Week: Your Right to Know

March 15, 2015 - March 21, 2015

Launched in 2005, Sunshine Week has grown into an enduring annual initiative to promote open government and push back against excessive official secrecy.  

Submit an event

Localizing the police militarization story

By Melissa Kaplan
8/19/2014 | 11:07 pm GMT

How many assault rifles does your local police force have? What about night vision equipment? One interactive graphic from the...

How Storyful connects social media users to news orgs

By Melissa Kaplan
7/9/2014 | 12:06 am GMT

A big hurdle facing news organizations that want to source content from social media users is the ability to verify...