Attackers rarely target you personally; most attacks are automated scans for any site with a known weakness. The good news is that most of these gaps close with simple steps.
The eight steps
- Keep WordPress, themes and plugins updated.
- Delete plugins and themes you do not use.
- Never use "admin" as a username, and use long unique passwords.
- Turn on two-factor authentication for administrators.
- Install SSL so the site runs on https.
- Take automatic backups stored off the server.
- Never install "free" copies of paid plugins from unknown sources.
- Give each user the lowest role they need.
About ClickB
Clients who came to us after painful hacks taught us that prevention is always cheaper than repair. That is why post-launch support is a fixed part of every ClickB project: regular updates, backups and monitoring, so owners can focus on their business.

