Author: Fabio Teixeira

Every WordPress agency has experienced it. A client calls because their site is showing a browser warning, a plugin update has broken something, or the login page is getting hammered with failed login attempts. Most WordPress security problems are not sophisticated attacks. They are straightforward setup issues that could have been avoided with a consistent process. The good news is that most of them can be prevented before launch. This is the checklist we would recommend building into any new

An SSL certificate is what turns your site address from http:// to https://, adding the padlock that appears in your visitor’s browser. Without one, every modern browser marks your site as Not Secure. That is bad for trust, bad for SEO, and in some cases a blocker for accepting payments. You’ll often hear this described as “installing an SSL certificate on WordPress”. Technically, the certificate itself goes on your server, not inside WordPress (here’s how, for cPanel or Plesk). What this guide