{"id":58189,"date":"2020-11-17T15:30:16","date_gmt":"2020-11-17T21:30:16","guid":{"rendered":"https:\/\/blog.cpanel.com\/?p=58189"},"modified":"2020-11-17T15:30:16","modified_gmt":"2020-11-17T21:30:16","slug":"wordpress-hardening-one-click-security-with-cpanel","status":"publish","type":"post","link":"https:\/\/devel.www.cpanel.net\/blog\/tips-and-tricks\/wordpress-hardening-one-click-security-with-cpanel\/","title":{"rendered":"WordPress\u00ae Hardening: One-Click Security with cPanel"},"content":{"rendered":"\n
WordPress is far and away the most widely-used content management system on the web, but that popularity comes at a price. It\u2019s also the most attacked CMS. Not because it\u2019s un-secure, but because attackers know that a WordPress vulnerability is a gateway to tens of millions of websites.<\/p>\n\n\n\n
As soon as a WordPress website goes online, automated bots begin to probe it for weaknesses. That\u2019s why it\u2019s critically important to security harden WordPress sites, ensuring that they have the smallest possible surface area for attackers to target.<\/p>\n\n\n\n
Security hardening was once a long and complicated manual process, but WP Toolkit for cPanel makes it a one-click affair. This article will explore some of the ways WordPress vulnerabilities are exploited and how WP Toolkit protects sites against many common attacks. <\/p>\n\n\n\n
Every vulnerability is unique, but most attacks against WordPress sites fall into one of four categories:<\/p>\n\n\n\n
WP Toolkit for cPanel implements features and security measures that protect sites against each of these attack types. <\/p>\n\n\n\n
cPanel\u2019s WP Toolkit is a complete WordPress management solution with an intuitive interface. You can think of it as a single dashboard for controlling all of your WordPress sites. It automates WordPress hosting tasks, including installation, updates, and backups. It also surfaces configuration tweaks that you\u2019d otherwise have to dig around in the admin interface or edit configuration files to change. <\/p>\n\n\n\n
WordPress security hardening is one of the places where WP Toolkit really shines. First, it applies fixes for critical vulnerabilities during installation, so sites are secure before they go online. Second, it scans existing sites for suboptimal security settings and can fix them at the click of a button. <\/p>\n\n\n\n
We\u2019ll have a look at some of the security fixes it applies in a moment, but first, we\u2019ll show you just how easy it is to security harden a WordPress site with cPanel.<\/p>\n\n\n\n
To use one-click hardening, you will need:<\/p>\n\n\n\n
You can find the WP Toolkit in Applications <\/em>on cPanel\u2019s main page. Sites are listed on the overview page with status information and configuration switches. <\/p>\n\n\n\n <\/p>\n\n\n\n If you take a closer look at the second site, you will notice that, under the Status<\/em> heading, the Security <\/em>line reads Check Security. <\/em>WP Toolkit scanned the site and noticed that several non-critical security measures have not been applied. The first site has already been hardened, so it displays View Settings. <\/em><\/p>\n\n\n\n You might also see Fix Security <\/em>here, <\/em>which means that critical security measures have not been applied. <\/p>\n\n\n\n We can click on the status message to open the Security Status <\/em>panel, which displays all of the security measures the WP Toolkit can apply. <\/p>\n\n\n\n You can apply each measure individually by checking the adjacent box and clicking Secure. <\/em>They can be reverted, where possible, by selecting them and clicking Revert. <\/em>But we want to secure our WordPress site in a single click, and to do that, we\u2019ll select the Security Measures <\/em>checkbox at the top of the column and then click the Secure <\/em>button. <\/em><\/p>\n\n\n\n What if you host dozens of WordPress sites? It would be time-consuming to secure each one individually, so you\u2019ll be happy to hear that you can use the WP Toolkit to secure any number of sites at the same time. On the overview page, click the Security Tab<\/em>. <\/p>\n\n\n\n cPanel displays a list of sites and their security status. Use the checkbox next to each site to select those that aren\u2019t fully hardened, and then click the Secure <\/em>button at the top of the page.<\/p>\n\n\n\n You\u2019re given a chance to specify which security measures to apply, and then cPanel automatically hardens all selected sites. You can use this method to secure dozens or even hundreds of WordPress sites simultaneously. <\/p>\n\n\n\n WP Toolkit applies almost 20 security measures, but we\u2019d like to highlight a handful of the most important here. <\/p>\n\n\n\n Finally, the WP Toolkit makes it simple to quickly update WordPress Core, plugins, and themes in a unified interface, as well as to manage automatic updates. Plugin and theme vulnerabilities are the most common WordPress exploit, and regular updates are the only way to protect sites from vulnerabilities in their code. <\/p>\n\n\n\n To finish, let\u2019s look at one more security essential that cPanel simplifies: restoring backups. A recent backup is a lifeline if all else fails. It allows users to restore a compromised site to a secure and uninfected condition, and, with the WP Toolkit, making and restoring backups takes seconds. <\/p>\n\n\n\n To create a backup, click the Back Up <\/em>button. If you have previous backups, they are listed on the page. To restore your WordPress site and its database to an earlier state, choose a backup file and click the restore icon, as shown in the next image.<\/p>\n\n\n\n The WP Toolkit makes it easier than ever to build a secure WordPress hosting platform with cPanel. Security hardening is now a one-click process, allowing hosts to protect servers, sites,\u00a0 and users without a long and expensive manual hardening process.\u00a0<\/p>\n\n\n\n<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
One-Click Hardening for Multiple WordPress Sites<\/strong><\/h3>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
Security Settings in WP Toolkit<\/strong><\/h3>\n\n\n\n
Restoring Backups with WP Toolkit<\/strong><\/h3>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
Secure WordPress Hosting with cPanel<\/strong><\/h3>\n\n\n\n