Backups and Security Basics
Most website problems are preventable with a few good habits.
Backups
Section titled “Backups”A backup is a copy of your website’s files and database that can be restored if something goes wrong.
- Your site’s backups may be handled by your web host, a backup plugin, or by us. Ask if you’re not sure which applies to you.
- A good backup is automatic, stored off the website’s server, and tested now and then.
- Before big changes (redesigns, major updates, new plugins), make sure a fresh backup exists.
Passwords and logins 🔐
Section titled “Passwords and logins 🔐”- Use a long, unique password for WordPress. A password manager makes this easy.
- Turn on two-factor authentication (2FA) if your site offers it.
- One person, one account. Never share logins; add a user instead.
- Remove accounts for people who no longer need access.
Keep things updated
Section titled “Keep things updated”Out-of-date plugins and themes are the most common way sites get hacked. See Plugins and Updates for who handles updates and what’s safe to do.
Watch out for scams 🎣
Section titled “Watch out for scams 🎣”- Emails claiming your domain is “expiring” or your site “has been hacked” are often phishing. Don’t click links; contact us or your registrar directly.
- No legitimate company will ask for your WordPress password by email.
Signs something is wrong
Section titled “Signs something is wrong”- Pages you didn’t create, strange redirects, or spam links on your site
- Users you don’t recognize under Users
- Warnings from Google or your browser that the site is unsafe
If you notice any of these, contact support right away.