My Website Security and Users
Securing my website is important because it protects data, maintains user trust, and prevents security incidents that could lead to site degradation or outages. Without strong defenses, attackers can exploit vulnerabilities to introduce malware, take control of the site, exfiltrate data, and put me and my visitors at risk. Cyberattacks against public-facing websites are common and may result in unauthorized modification, loss of availability, data compromise, or web hijacking (Cybersecurity and Infrastructure Security Agency, 2021).
Three practical ways to strengthen security include enforcing HTTPS encryption, implementing regular software patching, and strong password policies. HTTPS keeps information private even if traffic is intercepted, while timely software patching closes security flaws before they are exploited, and strong password rules reduce the risk of unauthorized access.
I envision two primary user roles for my website, administrator and subscriber, drawn from the available options of administrator, editor, author, contributor, and subscriber. As the sole Administrator, I manage the site, including editing posts, adjusting settings, and handling all technical and content tasks. Subscribers may leave comments and manage their own profiles but have no ability to create, edit, or publish posts and have no administrative rights.
Reference
Cybersecurity and Infrastructure Security Agency. (2021, February 1). Website Security. https://www.cisa.gov/news-events/news/website-security
What I’ve Learned About Plugins
Using only safe and trusted plugins is important, since a malicious plugin can open the door to security risks or site failures. The safest starting point is the official WordPress Plugin Directory.
When choosing plugins, I look for:
- Number of active installations
- When it was last updated
- Reviews
Plugins with a lot of users and regular updates are more reliable.
I avoid plugins with a lot of negative reviews.
Besides the official WordPress Plugin Directory, other sources for plugins include:
- GitHub repositories
- Official sites of established companies
It is important to verify the author’s reputation and review the plugin’s documentation and update history.
I chose the WP Accessibility plugin by Joe Dolson after finding the UserWay setup process to be less than user-friendly. While UserWay is a solid platform, I prefer a quieter solution without adding another visible interface element. WP Accessibility works behind the scenes, entirely free, actively maintained, and a cleaner option. It improves the site’s accessibility by automatically adding essential fixes such as skip links and does not require complicated setup or expert knowledge. The combination of simplicity and clean integration made it a top choice, though I installed UserWay for other requirements.