{"id":2355,"date":"2018-02-27T17:04:40","date_gmt":"2018-02-27T17:04:40","guid":{"rendered":"https:\/\/blog.canspace.ca\/?p=2355"},"modified":"2020-01-16T14:59:03","modified_gmt":"2020-01-16T19:59:03","slug":"how-to-make-your-website-secure-2018","status":"publish","type":"post","link":"https:\/\/www.canspace.ca\/blog\/security\/how-to-make-your-website-secure-2018\/","title":{"rendered":"How to Make your Website Secure: Protect Your Content in 2018"},"content":{"rendered":"

\u201cIt can\u2019t happen to me\u201d is how most website owners think of hacking attacks and computer viruses. But one thing is certain \u2013 website security matters. And literally any site, regardless of its size and niche, can be hit by various threats.<\/span><\/p>\n

But even if you\u2019re a complete beginner, you can successfully protect your web property. Just follow our straightforward tips on how to make your website secure, and do let us know if we could help in any other way!<\/span><\/p>\n

Tip #1 \u2013 Update your site regularly<\/span><\/h2>\n

Whenever you get an \u201cupdate available\u201d notification, do not ignore it. As soon as you can, be sure to update and\/or upgrade your site script, to fully enjoy the newest features. It\u2019s indeed quick, but the vital step to website security. Keep in mind that the new version of your web script also fixes bugs and errors, which can improve your site\u2019s performance.<\/span><\/p>\n

Tip #2 \u2013 Keep your passwords strong and updated<\/span><\/h2>\n

To further enhance your website security, make sure all your passwords are strong. What does that mean? Well, avoid using your birth date, name and similar easy-to-guess words. Utilize the power of numbers, but also add special characters, including both lowercase and capital letters. Finally, remember to regularly change all passwords connected to your website\u2019s services.<\/span><\/p>\n

Tip #3 \u2013 Invest in privacy protection<\/span><\/h2>\n

When <\/span>you\u2019re buying a domain<\/span><\/a>, most providers offer an additional layer of protection (some even offer it for free). So consider hiding your basic information, to prevent scam emails and other threats. Would you stand in the middle of the street, yelling out your personal, confidential data to everyone? You\u2019ll agree there\u2019s no reason to do the same online.<\/span><\/p>\n

Tip #4 \u2013 Delete your site\u2019s installation folder<\/span><\/h2>\n

Once your website is installed, set, and running, feel free to delete its installation folder. Besides the fact you won\u2019t need it anymore, such a step actually adds to your site\u2019s security. How? Well, hackers could remotely access your computer, run the file, and from there \u2013 gain control of your website. Therefore, either rename or delete the folder to stay safe.<\/span><\/p>\n

Tip #5 \u2013 Make plugins work for, not against you<\/span><\/h2>\n

If neglected or poorly chosen, plugins could harm your site. But on the other side, a wise choice of plugins can add an important layer of security to your web property. Focus on those who boost the functionality of your site\u2019s script, without burdening and slowing it down. Also, keep all of your plugins up-to-date and don\u2019t hesitate to remove any suspicious ones. Better safe than sorry.<\/span><\/p>\n

Tip #6 \u2013 Educate yourself on web security<\/span><\/h2>\n

Each day, hackers, spammers, and various scammers discover new ways to attack websites. Despite the fact we can\u2019t control everything, there\u2019s still a lot of steps we could take to protect ourselves. Do your best to read the leading tech blogs, learn all you can about new threats, and then focus on what you <\/span>can<\/span><\/i> do to secure your website.<\/span><\/p>\n

Tip #7 \u2013 Use the SSL certificate<\/span><\/h2>\n

This one is crucial. Basically, your credit card information, usernames, passwords, and all other sensitive data should be hidden. And with an SSL certificate, your data becomes wonderfully encrypted. This means your information will be protected from malicious sources, and visible only to the server you\u2019re communicating with at that very moment. So, make sure you\u2019re conducting all confidential actions (purchasing, signing-up, and similar) with an SSL certificate in place!<\/span><\/p>\n

Tip #8 \u2013 Stay in full control<\/span><\/h2>\n

It might seem easier to let others manage your web properties. But we warmly advise you to stay in complete control of your website in order to keep it secured. A third party, such as a marketing agency, should definitely have access to some parts of your site. As the owner though, make sure you\u2019re the only person having a full access to an account.<\/span><\/p>\n

Are you using WordPress to host your site? Here are some tips for specifically securing your WordPress site: <\/span><\/h2>\n

Securing Your WordPress Website<\/span><\/h3>\n

Using Monitored Firewalls<\/span><\/h4>\n

When looking for a <\/span>hosting provider<\/span><\/a> \u2013 make sure they have strong monitored firewalls set in place internally.<\/span><\/p>\n

This ensures the servers where your WordPress website is hosted are protected and being watched over for suspicious activity.<\/span><\/p>\n

In addition to having the server firewalls up and running, ask how often the hosting company updates their server software to close potential exploits.<\/span><\/p>\n

At CanSpace we monitor our servers and client accounts 24\/7. This helps ensure the utmost level of security.<\/span><\/p>\n

Using Web Application Firewalls<\/span><\/h4>\n

In addition to server firewalls, securing your WordPress website can be done with a WAF (accessible from your cPanel).<\/span><\/p>\n

The best hosting companies will provide this. We base our WAF on OWASP rules. Which helps prevent attack attempts to web software.<\/span><\/p>\n

It is especially powerful in securing WordPress websites, Joomla etc. <\/span><\/p>\n

However\u2026 Since this isn\u2019t a legal requirement to be a hosting provider, most don\u2019t bother to set up a WAF. So remember to ask the hosting company you\u2019re checking out if they do or not.<\/span><\/p>\n

Securing Your WordPress Website with Plug-ins <\/span><\/h4>\n

There are a number of awesome, free plug-ins you can check out and install to ensure, without a shadow of a doubt, that your website is protected.<\/span><\/p>\n

Some of our favorites are\u2026<\/span><\/p>\n

Limit Log-in Attempts<\/span><\/a><\/h4>\n

\"protecting<\/a><\/p>\n

This plug-in limits the amount of times a person can try logging into your site before being locked out.<\/span><\/p>\n

Limiting the login attempts helps secure your WordPress site by ensuring hackers can\u2019t run password cracking software to try and get into the back-end of your website (which does happen).<\/span><\/p>\n

All in One WP Security<\/span><\/a><\/h4>\n

\"wordpress<\/a><\/p>\n

As the name would suggest, All-in-One WP Security does a number of things to help secure your WordPress website. Primarily it\u2026<\/span><\/p>\n