My name is Paul Battaglia from Digital junction,www.digitaljunction.com.au.
Great. Thanks, Paul. Okay, so we just want to cover website security. And that covers a whole range of things with security certificates and making a site secure. So really simple question. How do I secure a website?
Well, there’s a couple, there’s a number of things to consider when to keep your site secure. One is to have a good hosting company that has its own security on its servers and networks and it saves it saves you against a lot of the denial service attacks. Some of those companies are like WP Engine, AWS, and some of these more reputable companies. They are generally more expensive in terms of hosting. They’re not a few dollars a month they’re in the 10s and sometimes hundreds of dollars a month depends on what you need.
The themes that you don’t get any dodgy themes that haven’t been updated in a long time on from marketplaces like themeforest. So, nothing isn’t to install a security plugin that can help you with securing directories and files to stop them from being hacked and overwritten by by bots.
One of the classic ones is actually having a decent password. A strong password. So using something like a security Password Manager like LastPass, which is one example which is the solution that I use, it will suggest strong passwords, password like you know, 123 or password.
Really, oh, there we go. Okay, I’m gonna change one today.
Yeah well they’re you know, especially with WordPress I mean it’s um it’s it powers about a third of the of the websites on the internet and that’s increasing every year and people are lazy and also the the username don’t use you know admin as a username use something that is not the default which is what comes with WordPress. It just just makes it more difficult and if your heart site’s hard to to log into then you know that we’ll just move on to the next the next one that’s a little bit easier to find.
So we’ve gone through how do I make my website secure and that’s good. What about these free websites Security scans?
Yes. So there are this. There are a number of them out there one of them is one by security. Secure security don’t know I’ll I’ll add a link at the at the bottom of this podcast with any websites that I do reference, and they will give you a certain level of confidence that your site is secured. But to get a a deeper understanding of your security vulnerabilities, you do need to go with a paid version where you have to FTP and then analyze the files that existed in your in your hosting space similar to your antivirus on your computer.
And that’s a difference between, say scanning the ram as opposed to the file ram disk.
Exactly. Yeah. When will I know what RAM is as its memory and so forth? Okay. Yeah, exactly. Get a security certificate from our website because I know if I don’t have that, it shows up in Chrome that the site is not secure. I can even show up in some searching results that the site is not secure. So how do I go about getting that certificate security certificate?
That’s depending on your hosting company if you’ve some hosting providers will provide a free certificate. Generally, these days Let’s Encrypt seems to be the the popular choice by hosting companies. And you can easily install that through your control panel. I’m sure if you provide if you request a support ticket with the hosting company, and they’ll be able to install that freely. But there are paid versions as well and depends on what sort of business you run. e commerce businesses generally move away from Let’s Encrypt because and have a paid version because you generally have insurance and fraud and better fraud protection as a business, not that any of my clients have ever gone down that path of making a claim. I’m not sure how hard that is, but so there are ways there are certificate shops as well as generally ones that you can self install freely with.
Okay, so we’ve got some good advice there. So thank you very much for that and we’ll head on to the next part shortly.
Okay, thank you, Tony.
Transcribed by https://otter.ai