It is undeniably true that security is the main thing you must pay attention to when you are using WordPress. Still, optimizing other features is also important. Well, let’s go further about how to secure and optimize your WordPress.
First off, since the files stored in the /wp-admin/ folder are so sensitive — the blog leaves the folder open and unfortunately people who access this folder can do something with them — you can secure the directory by placing a .htaccess file in the folder to block access to all IP addresses but yours. Below is the code you must place in the .htaccess file:
AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName "Example Access Control"
AuthType Basic
<limit GET>
order deny,allow
deny from all
allow from xx.xx.xx.xx
allow from xx.xx.xxx.xx
</limit>Secondly, hiding your plugins can be necessary because it prevents the bugs and vulnerabilities that come with a plugin from damaging your site. So, to avoid other people from learning the plugins you are using, you can simply create an empty index.html file and place it in your plugins folder. This will be much safer.
Thirdly, keeping up with patches and updates is important. Actually, by keeping your WordPress updated, there will be fewer things to worry about. You are suggested to subscribe to the WordPress Development Blog. Also, deleting the meta tag on the header of your website is vital since it may reveal your WordPress version. It is suggested that you apply the latest version of WordPress for your site.
Furthermore, to secure your WordPress from hackers, it will be a good step to change the default Admin Account user from “admin”. The solution is to create a WordPress user with admin privileges through the administration interface. Afterward, you should log out from your site and log back in using your new user, then make sure to delete the admin user. Take note that the new admin user must be different from your normal post author.