Number 1 way to increase security for your WP blog?
 

Change the default admin name from ADMIN to something else. Saves so much drama and hassle down the road. Pass it on.:thumbsup

wise words and sigspot

Sometimes the most obvious and commonsense ones are the ones most overlooked... :2 cents:

You're right, I'm hitting myself for not thinking of this earlier

Good advice man

If you want to take it one step further:

Since day #1 in IT infrastructure - Best practice when it comes to any kind of system security, is to demote the admin to a userlvl with no right at all, and use another character as the real admin.

This goes for scripts, web or PC useraccounts.. everything.


By not removing the character, you have the bruteforce wannabe hackers try and hack a account with no rights instead of trying to find the real sysadmin account

That would work, too. Hackers + Wasted Effort + getting squat = WIN

That's very good advise :thumbsup

Check out the WP Security Scan plugin. This does a few things that help too.

Yeah, putting the wp files in a subdirectory not in the root also helps, and a dozen other little things