Tag Archive for: WordPress themes

There are a lot of blog posts, forums and websites that talk about Website Security. It can be overwhelming and scary to think that someone might hijack your website, but it happens. Trust me. And it’s no fun fighting to get your website back or having it down completely. I’m not trying to scare anyone but I want you to think about how you can PREVENT some potential frustration, time and money. Think about it as doing what you can now to reduce your risk of having issues with your website.

Here are a few things you can check on your own website to make sure you have some of the obvious things taken care of. Most apply to WordPress websites, since the majority of the websites I make are on this platform. Let me know if you have questions.

SSL Certificate

Every website should have an SSL (Secure Sockets Layer) certificate. Check with your hosting company if you don’t. For my clients who use BlueHost to host your website, it’s free. I know GoDaddy charges for it, annually I believe. An SSL certificate is code on your website’ server computer that provides security for online communications. When a web browser contacts your secured website, the SSL certificate enables an encrypted connection. It’s kind of like sealing a letter in an envelope before sending it through the mail. If you don’t have an SSL certificate, your website may still function as always, but it will be vulnerable to hackers and Google will warn visitors that your website is not secure. So, you will eventually lose your position on Google’s search results to competitors who have SSL certificates.

HTTPS://yourwebsite.com

Website Security HTTPSEvery website should be using HTTPS vs HTTP in front of your URL. Can you see the icon of a lock on the browser where your website address is? If you don’t see the lock, you need to secure your website. HTTPS is HTTP with encryption. The only difference between the two protocols is that HTTPS uses TLS (SSL) to encrypt normal HTTP requests and responses. As a result, HTTPS is far more secure than HTTP.

WordFence

For WordPress websites, I recommend adding a special FREE plugin to help secure your website from hackers. It’s called WordFence. You can install it yourself or I can install it and go over the settings. It adds firewall protection, it blocks hackers from trying to log into your website using a username they think you might be using. It does a lot more too, well worth it for a free way to help secure your site. WordFence will send you emails to alert you of any issues if finds that needs attention. I have clients forward those emails to me when they want my help.

Passwords

I’m sure you are aware, but it’s worth repeating. You should make sure your password is DIFFICULT. Yes, include capital and lower case letters and numbers and symbols. I recommend at least 8-10 characters or more.

You can Google website security and find out about a lot more tools, scans, programs and software. If you accept payments on your website or gather information on an online form, you really need to take these steps to make sure you reduce the risk of your website getting hacked.

Malware Infection

And if you do experience problems, I recommend SiteLock to help clean malware off of your website. How do you know when your website is infected with malware? You may get locked out from logging into your website at all. You notice posts on your website that you didn’t make. User accounts added to your website that you didn’t do, or sometimes the hacker will forward your domain name to another website completely, and let’s just say, you don’t want your clients seeing these types of sites, yuck!

A few More Tips

  • Make sure that the server that holds your website files has the MOST RECENT version of PHP software. You can check this by logging into your hosting account or calling your host company to verify.
  • For WordPress websites, make sure your Theme, Plugins, and WordPress version has AUTOMATIC UPDATES enabled. It’s like getting updates for your phone or Microsoft software. Updates are usually done because they fix a venerability with your website. You can now set a WordPress website to Automatically to the updates when they are available, but you have to check to make sure your site is updating automatically, because it’s a somewhat new feature and the default is set to NOT update automatically.
  • Make sure your hosting company is doing a regular backup of your website. Bluehost clients get this done automatically and for free, other hosting companies charge you for backups.
  • This last one isn’t website security focused, but it’s annoying. Ever go to a website and click on a link, and the link doesn’t work? It doesn’t take you anywhere? You might see a 404 Error? I hate that. That’s called a broken link. I have a WordPress plugin that I can add to your website to alert you when a link on your website breaks so you can fix it right away. Many of my clients are using it already and they fix the links themselves or the forward the email notice to me and I fix it for them. Whenever you add a link on your website or blog, to someone else’s website or blog, there is a chance that in the future, they remove the content, or the website goes down, and they your link breaks.

Let me know if you have any Website Security questions. Send me an email.

I tried to hit some of the basics that should be a quick fix or are easy to do. Some do get more complex, but are well worth it. Call me with your questions. While I may not be a full-time website security expert, I can help with these basic steps and usually help you out if your website gets really messed up. Again, if you focus on reducing your risk, it could save you time and money in the future.

Michelle Aspelin
Mindshare Marketing & Implementation Services, LLC

 

 

If your WordPress Websites are more than a year old, it’s time for a review and probably some updates. Here are a few tips for you to consider as you look over your WordPress Websites.

  1. Look at the content itself. Is it current? Do you have projects or events you need to ADD to your site? Review your COVID language as we are coming out of the pandemic and moving towards more in-person opportunities. Have any elements of your core organization changed? Any new policies to add, adjustments to your mission or objectives? Do you think your website is attracting the right audience to serve your purpose?
  2. Are your images outdated? A picture can speak a thousand words. Maybe it’s time to take some new photos for your website about your own projects, events, products, etc. If you don’t have your own photos, you can consider purchasing some at a very reasonable price. I list a photo website on my Resources page.
  3. Are your forms still accurate and asking all the best questions? Maybe it’s time to send your audience a survey. I seem to be getting a lot of those lately. Connect with your audience to know that you are still providing the products and services they desire. I like to use Google Forms so the answers are automatically transferred to a spreadsheet that creates a database for easy reference and sorting. There are many types of form options to help you gather information.
  4. WordPress websites are enhanced with plugins. Plugins can make your website load faster, keep hackers out, make working in WordPress easier with a drag and drop page editor, and you can use plugins to help with Search Engine Optimization (SEO) and Google Analytics. There are thousands of plugin options to make your WordPress website function to meet your needs. Make sure that you ENABLE the option to keep all of your plugins updated automatically. That was a somewhat recent change WordPress made and it’s fabulous. Outdated plugins are a like an open window for hackers to enter your site.WordPress Websites
  5. After looking at your website’s content, images, forms and plugins, if you still think it needs a new look, consider a new WordPress website theme. A theme is what gives your website it’s “look”, determines the layout with rows or columns, what the header and footer look like, the colors and fonts, if it has a sidebar or not, etc. Is it responsive, meaning it “moves” as you scroll down the page. Does your website look good on all devices like phones, tablets and desktop computers?
  6. Maybe it’s time to add a video to your WordPress websites. Videos can explain who you are, what you do, and how you are different. People browsing your website will enjoy the break from having to read everything. Keep your videos around 2 minutes. Much longer and you will lose the viewers interest. Keep it concise and on-point to share your message. You are better off with 1-3 smaller videos than one long video.

If you need help updating your website, let me know. I can help you review what you have and make recommendations to update your site and keep it as safe as possible from hackers. Your website is your hub of your marketing campaign. All of your ads, social media, business cards, etc. drive traffic back to your website. If it’s not current, it can hurt your reputation. Sometimes you just need a few minor changes to have a huge impact. Let me know if I can help with advise or doing the work for you.

Michelle Aspelin
Mindshare Marketing & Implementation Services, LLC
952-484-6015

Email Me