Brute Force Attack on my WordPress website - LearnWP

Brute Force Attack on my WordPress website

Protect your site from Brute force attack

For the past two weeks I’ve been receiving notifications from my web host that my website, is under brute force attack! I’m not alone.

According to HostGator, “there is an on-going and highly-distributed, global attack on WordPress installations across virtually every web host in existence”.

How can we protect our WordPress sites from intruders?

  • Delete any the standard “admin” WordPress username: If your WordPress installation has an administrative login that is “admin” you are at increased risk. Read more about how to remove “admin”.
  • Use a strong password: Strong passwords contain upper and lowercase letters, are at least eight characters long, and include “special” characters (^%$#&@*).
  • Limit the number of allowed login attempts: Go to Plugins -> Add New and search for “Limit Login Attempts”. Install and activate the plugin. You can adjust the number of allowed attempts under Settings -> Limit Login Attempts. This however won’t stop hackers from continued attempts using different IP addresses.
  • Change where you login: The Stealth Login Page plugin will prevent a brute force attack on your wp-login page. What it does is change where you login and send anyone going to the standard wp-login away from your site.Go to Plugins -> Add New search for “Stealth Login Page” and install it. After you activate it, go to the settings page under Settings and you’ll see a simple set of options: Enable/Disable, the redirect URL (just enter, the question (one short word), the answer (one short word), and an option to e-mail the site admin the new URL string to access the login page. You will want to bookmark your new login page and notify your web developer and any others who need access of the change.
    You will now login at (replace question and answer with the words you entered in the plugin setting.
  • The best way to ensure that your WordPress site is safe is to pick a web host that only hosts WordPress! I moved my site to WP Engine [affiliate link] and am so glad that I did. They are more expensive than the cheap shared hosting I’ve used up till now, but totally worth it!

Want more? Here’s a detailed list of Security tips from WordPress.

Related Posts

If you liked this post, you might also be interested in one of these.
Registering your domain name
Getting Started with Pinterest for your Business

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top