? How to Secure Your Website? // WordPress, Drupal, Joomla Tutorial

The security of your website might not be at the top of your priority list right now, but it should be. The consequences of your website falling victim to a hack or data leak can be severe.

Taking some time to secure your site is going to save you a lot of hassle and time further down the road, and there are some easy ways to do this.

In this video, I give you some great tips to start securing your site and thus hugely reduce vulnerabilities.

These are the main 10 steps to securing your website:

Step 1 - protect your Domain
- Make WHOIS private
- Lock domain transfer
- Set forwarding email

Step 2 - Hosting & Private IP
- Get VPS (Virtual Private Server) or Dedicated, not shared hosting!
- Make sure your IP is also dedicated

Step 3 - SSL Certs
- Set up a reputable SSL, sometimes Let's Encrypt gets flagged by IDS
- Don't use Cloudflare Flexible (make sure it's Full or Full/strict) instead

Step 4 - HTTPS Redirection
- Set up your HTTPS redirection in the .htaccess file
- Permissions should be 755 for folders and 644 for files

Step 5 - Cloudflare - Reverse Proxy Server
- Set up CF CDN (Content Delivery Network) and WAF (Web Application Firewall)

Step 6 - Security Plugins
- Set up WordPress, Drupal or Joomla security plugins
- iTheme and WordFence are pretty good
- Set up (2FA) two-factor authentication
- Hide the backend

Step 7 - Website Monitoring
- Use a tool like Sucuri to monitor and scan the website for malware
- it also monitors blocklists and spam

Step 8 - Backups
- Make sure your backups are done offsite
- You can also use Sucuri for backups
- Sucuri also monitors uptime

Step 9 - Website Updates
- Make sure you update your website frequently
- Use a service like Rhyno Cybersecurity to provide updates
- Rhyno also provides enterprise secure hosting

Step 10 - Review your headers
- Check Mozilla Observatory to do a security review
- It checks SSL cert and TLS
- Checks HSTS preloader

#WEBSECURITY #TUTORIAL #CYBERSECURITY