From the Hardening page you can manage the settings such as:
- Auto Update Software - Select what needs to be automatically updated each time WordPress looks for updates in the background. Keep in mind that if a plugin update contains a bug or a fatal error, it could break your site. In case you want to activate Auto Updating, check the corresponding checkboxes and click Save Settings at the bottom of this section
- Disable the theme editor - This could protect you from potential automated attacks that involve the theme editor
- Remove readme.html - This will attempt to stop basic readme.txt scans
- Disable user enumeration - Block hackers from getting your usernames
- Hide WordPress version - removes the WordPress version in the tag in the HTML output
- Enable activity log - every user action will be recorded and put to activity logs
- Log failed logins - If this is checked along with the activity logs, we will also log failed login attempts
- Block Application Passwords - Disables the application passwords feature introduces in WordPress 5.6
- Restrict XML-RPC Access - restricts access to xmlrpc.php by only allowing authenticated users to access it
- Restrict WP REST API Access - Restricts access to the WP Rest API by only allowing authenticated users to access it
Lastly, we have Registration Email Blacklist input, from which you can block users with certain emails or email domains. You need to separate emails with commas.
For example we want to block:
- [email protected]
- and all the emails from the domain example.com ([email protected], [email protected])
In that case we type in "[email protected], @example.com"
Remember to click Save Changes after making any changes.
reCaptcha is a powerful tool for protecting your site against different spambots.
With Patchstack you can integrate reCaptcha easily to your WordPress site's:
- Commenting forms
- Login form
- Registration form
- Password reset form
You can choose whether to use reCaptcha v2 or reCaptcha v3.
Find information about different reCaptcha versions here!
To activate Google reCaptcha on your site, you will have to generate a reCaptcha Public Key and reCaptcha Secret Key. Here is a tutorial how to generate those: https://docs.patchstack.com/docs/how-to-get-the-site-and-secret-key-for-the-recaptcha-feature
After all the changes, click on Save Settings.
Updated 5 months ago