Website Security Is Fluid
It’s definitely not just installing a plugin and then forgetting about it. It’s a constant battle to outwit those who would like to gain access to vulnerable information. There are different areas of your site that can be vulnerable if not secured.
Today, we’re going talk about those different areas and why and how you need to keep them locked uptight.
Insecure Webhosting –
WordPress sites are hosted on a web server. Some hosts do no properly secure their hosting platforms. This makes all websites hosted on their server vulnerable to hacking attempts.
Using those bargain web hosting companies who don’t have the assets to protect your property can really hurt you in the long run!
Using Weak Passwords
You have different passwords for different parts of your site and all of them need to be kept secure. Below is a list of passwords that need to be checked and possibly changed.
- Your WordPress Admin
- Web Hosting Control Panel
- FTP Accounts
- MySQL Database used for your site.
- Email Accounts are used for WordPress admin or hosting accounts.
Unprotected Access To WordPress Admin (WP-ADMIN DIRECTORY)
This gives a user access to perform different actions on your site. It is the most commonly attached area of a WP site.
Incorrect File Permissions
Are a set of rules used by your web server. These rules s help your server control access to files on your site. Incorrect rules can give a hacker access to write and change those rules. Here’s a great article on WP BEGINNER on how to change these!
Not Updating WordPress
Each new version fixes bugs and security vulnerabilities. If you don’t update you leave those vulnerabilities.
Not Updating Plugins & Themes
Same as updating WordPress. Not updating plugins and themes is dangerous can leave your site weak.
Using Plain FTP Instead Of SFTP/SSH
You should always choose SFTP access instead of FTP it is much more secure.
The key difference between FTP vs SFTP is that SFTP uses a secure channel to transfer files while FTP doesn’t. With SFTP, your connection is always secured and the data that moves between your FTP client and your web server is encrypted.
Using “Admin” As A WordPress Username
Never use “ADMIN” you should always use something unique. Enough said!
Nulled Themes & Plugins
Never use plugins and themes from unreliable sources. Malicious code can be put into either that can give a hacker access.
- You Don’t Know What Else Is in the Code
- Developers Need Money To Continue Improving Their Products
- You Won’t Get Any Support From The Developer
- You Won’t Get Any Automatic Updates
Not Securing WordPress Configuration WP_Config .PHP File
Wp_config contains your database login credentials. To keep that from happening add this piece of code.
The WordPress wp-config. php file contains very sensitive information about your WordPress installation, such as the WordPress security keys and the WordPress database connection details. You certainly do not want the content of this file to fall in the wrong hands, so WordPress wp-config. Here is a great article on how to secure these important files.
Not Changing WP Table Prefix
Change the wp_ prefix. Here’s a link that will take you to a blog post that will explain how to do this if interested.
The most important part of my job is to make sure your website stays safe, secure and user friendly and I take that very personally. If you’d like to have one person to go to with all of your website issues then let’s talk! Schedule a free consultation today!
Each year I am approached by companies wanting me to try their products & services and ultimately share them with all of you. Some have been great additions to my business others have left me disappointed and flummoxed. I thought I would share with you the best & the worst from the past year!
To begin with, I’m going to break it down into 4 categories.
- Blogging tools
- Social Media
- Email Marketing
- Running your business
As you know (if you have a blog) there is always so much that needs to be done in a short amount of time so anything that I can find that will:
- Save Time
- Save Money
- Improve My Skills
is a Godsend to me. Now, I want to share them with you!
I have my own hosting that I provide through Flywheel (owned by WPEngine) which runs $20 a month. We provide fast, secure hosting, free SSL’s, and amazing support. I only have three spots available.
For someone just starting out or on a tight budget I use **Bluehost. I have to say that I have set up hundreds of sites on Bluehost and not once have I ever had a problem. Once upon a time, Bluehost was considered the bottom of the barrel in terms of hosting, but a few years ago they turned it around and I have to say that I’ve been very impressed with how hard they have worked to improve every aspect of their service.
I have always been a Genesis girl and **Studio Press is the place to get the best themes. A few months ago I had the opportunity to work with **Divi by Elegant themes and I have to say that I absolutely love it! It’s so versatile and easy to use and saves me tons of time. There are so many things included that you hardly need any plugins at all!
Listen I know that those sneaky plugins get you where it hurts. I’m sure you have seen the notices in your dashboard ‘get this pro version’, ‘buy this’, ‘do that’. Nine times out of 10 you don’t need it. There are free plugins for just about anything. My go-to plugins are:
- Updraft Plus for backing up.
- Wordfence for security.
- Jetpack lots of things.
- Akismet for spam.
If you’re using Genesis then I add:
- Genesis Enews (optins)
- Simple Social Icons
- Simple Social Share
If you’re using Divi
All of those are free & if there’s something you want just search the plugin repository.
Hubspot created a blog post with 60 free online courses that you can take to improve your skills. If you don’t follow Hubspot’s blog you really should. There is always so much valuable information.
Would you like to learn more about Facebook ads? Here’s a great post by Insane Growth that explains it all.
Social media is the bane of my existence, but it’s also a necessary evil. I build websites and create content with business tips for bloggers, entrepreneurs & small businesses. I get asked to try a lot of different social media scheduling tool and here is my honest opinion.
**#1 For me is Sendible.com. I run three different websites and manage several clients’ social media accounts. Scheduling blog posts and monitoring keywords that I set up, even monitoring my competitor’s social media accounts. If you run multiple blogs or social media accounts
Sendible is the best.
Most places make you pay per account so for three sites I would have to have three different accounts. I would only be able to pick up one RSS feed unless I had three different accounts.
I could not run my business without Sendible!
Sendible is different. I have a set number of services I can set up and it doesn’t matter how many RSS feeds you pick up and auto-posts new pieces. You can schedule them to repeat however many times it’s all completely up to you. I post to five different FB pages for various people and with Sendible I can do it automatically saving myself lots of time.
Then there is **Tailwind
I love using it for Pinterest.
I know I’m not taking full advantage of the features but what I am using I love. BUT I don’t like them for Instagram. I tried it I really did, but it was just too confusing and I wasting to much time trying to figure it out.
A few years ago I bought a lifetime membership for Grum.co for only $39 and I love it for scheduling Instagram posts. That’s all it does Instagram, but it’s so easy to use. Unfortunately, they are no longer taking on new customers. If I didn’t have this I would make the time for Tailwind, but this one is just to easy and it’s a lifetime purchase.
I love Co-schedule I really do, but because of the limitations of only having one site on one account, I just can’t justify that expense when I have other options. It offers a boatload of features and it’s easy to use.
There is really no “free” service for scheduling your content. You can use “Publicize” inside your WordPress site and it will automatically post to FB, Twitter, & LinkedIn.
I know that Buffer offers a free version but I’m not sure of its limitations. I’ve always found it too confusing to use.
If you’re going to spend money this is one of the places where I say if you can pay for it then get it. A good social media scheduler can save you loads of time while helping you build your tribe.
In today’s 24/7, 100mph world if you’re not marketing through email then you’re leaving a lot of money on the table. You should absolutely be sending a welcome email sequence & sending out an RSS to your subscribers.
A few months ago, I was singing the praises of **Engagebay and I learned a very valuable lesson. Sometimes quick decisions can be the wrong decisions. It can send beautiful emails, there are tools for marketing, sales or service. I feel as if it is an excellent platform, but it just didn’t fit my needs. The main problem was the RSS emails. There just wasn’t enough flexibility and I actually sent out a few crazy emails before I gave up.
If you’re running a small business then I cannot recommend Engagebay enough. It’s beautiful, easy to use and handles so many tasks. It’s also affordable. Here is a link to their Youtube channel which has a lot of info about its features. It’s a great platform I just tend to have a problem with change I guess.
So, I’m back at MailChimp and that’s where I’m staying! I know my way around, it’s easy to use (most of the time) and it’s cheap. They have changed things and unless you have a paid account you are limited in what you can do. Such as only having one audience(list), limitations on automation, etc. I pay for The Blogging 911 account and use the free version for Wanding Web Designer & The Diary of an Alzheimer’s Caregiver my other two sites. The paid version runs me $9.63 a month.
Have you seen my the MAILCHIMP EXPLAINED ebook in the 911 Resource Library? It’s just one of the many free resources inside.
I’ve worked with ConvertKit before and it is easy to use. I didn’t like the design limitations and figure if I’m going to spend $30 a month it needs to have a lot more.
Running your Business
There are several tools that I use every single day to run my business. Some are free (well most are free) but they are still necessary. Tools such as:
- 17Hats – is an all-around scheduling tool, lead capture forms, templates such as contracts or estimates. It runs $39 a month for all of its features and there are many. I personally only use the free version because I use the templates & lead capture forms (those project inquiry forms you see around here).
- Acuity Scheduling – If you need an easy way for people to schedule appointments I highly recommend Acuity. Their free version has always been more than enough for me.
- Asana – This is my project management tool and it keeps me on track when I’m building out a new site, managing other projects or even just things I need to do. There is both a free and paid version and I’ve always found the free version more than enough for my needs.
- Canva – There is a free version of Canva that works very well. I use Canva almost every single day and I love it for it’s easy to use dashboard, to the free and paid elements like stock photos, icons, frames, colors, and fonts. For this, I splurge and get the paid version so that I can store my own logos, my fonts (up to 25) and my brand colors for $12.95.
- Google Drive – Also free. I use it to store all of my clients’ assets. I like how easy it is and it works great with Gmail which is another great free tool. I do use the paid version of this and it runs $6 a month and I have tons of storage and it’s easy to use.
- One Drive – This is part of my Microsoft subscription which is about $7 a month. This is where I keep all of my assets. (Such as stock images, templates, or other graphics).
- Dropbox – This is where I store all of the backups for my clients & my own personal websites. This costs around $10 but they’ve added a bunch of new features.
- Screencast-o-matic – This another thing I purchased from Sumo. It was a lifetime subscription for only $39 and I use it whenever I need to make tutorials or other videos where I share my screen. It’s something I purchased on APPSUMO.
- APPSUMO – is a great place to find great deals on products or services to run your business! They always have freebies or lifetime deals that will save you tons of time and money.
Know some great tools that I might not know about? Let me know in the comments below.
** Means that it is an affiliate link if you purchase a service, with the (**) beside it, means that I will earn a small commission that will in no way affect your cost.