Two people share one admin password

Best security wordpress starts with a real fault on the site you have. The usual one is this: two people share one admin password.

The failure we expect

• Two people share one admin password
• File editing from the dashboard is still turned on
• An extra administrator showed up in the user list
• HTTPS is on and the admin still loads mixed content from an old plugin

The pieces we open

WordPress security work is the admin, the plugins, the users, and the files. A firewall plugin with the defaults left on is not the same as knowing who can log in and which plugin is abandoned.

• Recently modified files outside the uploads folder
• The WordPress and PHP versions
• Plugins and themes, including inactive ones
• Every user with administrator rights

After you call

Security work is users, updates, file changes, and the login. You should still be able to edit the site when we are done, and you should know which password changed.

If the site is already compromised, we clean that before we add restrictions. A lock on a dirty site feels safer and is not.

Computer Geek works from Toronto with clients in other cities. Distance does not change the check. Access to the host and a page that shows the problem does.

Call 905-426-1784. We look at the site and tell you what the work is before it starts. The service page for this is WordPress security.