[daya143]

I am starting on wordpress, i see there MUST to use security plugins to protect the site... so your the wordpress user, can you please share your thoughts and plugins you use.
thank you,
Daya

[Stijn]

Wordfence is the most popular security plugin, and the second-most WP plug-in overall. It's definitely a good place to start.
https://wordpress.org/plugins/wordfence/

If you want to take a look at some other plug-ins, I would recommend to check https://www.tripwire.com/state-of-securi...te-secure/

[Genesis]

Agreed with @Stijn. I've got Wordfence on all of my Wordpress sites. I also use the WP Limit Login Attempts plugin on all of my sites:
https://wordpress.org/plugins/wp-limit-login-attempts/

[hollyboom]

Hi,
Yes, Wordfence  is a good choice, and you should use hideWp, and of course set correct 644 permisions for your config file.
Best regards.

[eclisseweb]

It's not  only a plugin that can check and prevent the security of your site site. You need to adjust some rules in .htaccess for example, and others parameters in admin modules

[dee1337]

just want to remind you: the best security is to use as less plugins as possible due to the fact that the most invulnerables come from non-professional coders.

[daya143]

thank you all. if u have tutorials or codes or step to follow, please share...

[Aractus]

just want to remind you: the best security is to use as less plugins as possible due to the fact that the most invulnerables come from non-professional coders.

This. You're more likely to have a vulnerability introduced by a poorly coded theme than you are to have one from the WP admin files. Also, don't use the default user-name of admin - make something up that only you know, use a strong password, and then only use a secure HTTPS connection when logging in to the admin area.

[bissou]

i recommand you to ensure the bases of wordpress securtiy are made :
strong credientials passwords compenations , updating you wordpress version and plugins and install a wordpress firewall or antivuris
Ithems Security pro is the best word press security plugin for that but you have to pay for it it s not for free.

[davenull]

i prefer do not use any plugin but set the right permissions. the security plugins are also hackable... i'm an exploit coder, i recommends you to use less plugin as possible.
i'm translating my website from italian to english, and i'm writing it some security tips for wordpress and general php websites.

[Mikic]

Just like @Stijn. and i agree that , this plugins is the best:
https://wordpress.org/plugins/wordfence/

[Yozora]

Just like @Stijn. and i agree that , this plugins is the best:
https://wordpress.org/plugins/wordfence/

 To earn a Quality Post credit, would you tell us why you think WordFence is the best?

[jfairpl1]

WordFence is quite good as it give you live traffic as well. Usefull to see if any bot are flooding your server. But you see and can also block the ip of any bot trying to crash your site. And lot of option like a human verification, at the login. So a bit more problematic for some bot and for me it gives good result.
 Just 1 might not be perfect, but still better than none.

[sharukhislam]

For a free security plugin i would sugest you use WP cerber its quite good

[iwsm]

I think All In One WP Security & Firewall is a good choice for securityof you wordpress site.