The Gotham Bus Company

  • About
  • How Can We Help?
    • IT/Tech Consulting
    • Managed Cloud
    • Managed WordPress Hosting
    • Colocation/Datacenter
    • Shared Hosting
    • Spam Filtering
    • Denial of Service Attacks
  • Blog
  • Contact Us
  • Get Help

February 14, 2016 by Drew Linsalata

WordPress Management for Non-Techies: The Weak Link Is People

Share the post "WordPress Management for Non-Techies: The Weak Link Is People"

  • Facebook
  • Twitter

WordPress Management for Non-Techies

Odds are you’re at least trying to to secure your WordPress sites, right?  You’re probably using security plug-ins like Wordfence, or maybe you’ve signed up for some promise of “secure” hosting, or you’ve spent time reading and researching WordPress management and security. Maybe you’ve even spent a few bucks to have a company like Cloudflare or Sucuri involved.  All good, but you’re forgetting the weak link in the chain.

The Weak Link Is People

In the end, security rests in the hands of people, not software.  This is where the problem often lies.  Not because software is better than people, but because humans are …. well …. human!  We’ll chose the path of least resistance every time.  We resist change.  We chose “faster” over “better”.  Its just our natural tendency, and if you’re going to really be good at managing and securing WordPress you really do need to understand and work with this fact.

Common Mistakes

What are the most common human-centered mistakes we see in the WordPress universe?

  • Horrible passwords.  Like really awful.  Seriously.  Bad.  Please do not let your password be “123456“.
  • Everyone is an administrator?  Why?  People who write and edit should be assigned author, contributor or editor privileges, not administrator privileges.
  • Working without encryption.  Why are you using FTP and HTTP rather than SFTP and HTTPS?  The best passwords in the world don’t matter if someone is sniffing your packets while you work at Starbucks.
  • Accepting one-click WordPress install defaults.  Sure that’s really easy, but are you sure that the installer set things up as securely as they can be?  Here’s a hint.  Most times it doesn’t.
  • Not keeping core and plug-ins updated and vetted.  Wordpress and plug-ins are constantly updated, not just to add features to be close serious security holes.  If you don’t stay updated and patched, you’re leaving the front door wide open.
  • CHMOD 777 !!!!!!!  If you don’t know what this is, learn.  If you do know what this is and you’ve done it, shame on you.

Its About Habits and Inertia

Nobody is making these mistakes because they’re trying to sabotage your WordPress sites.  Its just what humans do as a matter of course. People resist and fear change for a variety of reasons, and most won’t take the time to learn new tricks unless they really have to.  Learning new ways to work to improve your WordPress management and security is a challenge. It takes time and effort and it can be temporarily disruptive to your workflow.

So What Are You Supposed To Do?

  • Accept that good WordPress management and security requires action on your part. You’re going to have to take an active approach to the problem.
  • Be open to learning new tools, techniques and workflows.
  • Understand the risk/reward equation when it comes to seeking efficiency.  Every time you forego a security measure in favor of something faster or more convenient, you’re choosing reward and maximizing risk.
  • If you’re in a team, best practices and security need to be “baked in” to your culture. Educate and reinforce!

I’m Not A Technical Person!  How Am I Supposed To Know All This?

You’re not!  When we run into things that we don’t know, we engage experts that do know.  Maybe its time for you to do the same when it comes to how you WordPress management, security and workflows.  Getting some training and adding proper expertise or experience to your team will likely pay off many times over down the road.

As it turns out, we happen to be experts on this particular topic!  Why not drop us a note?  We’re happy to take a look at your situation any time.

—-

If you’re sharing this article on social media, thank you!  Please be sure to use the #wordpresswisdom hashtag so we can build a vibrant community dedicated to WordPress best practices.

 

 

 

Share the post "WordPress Management for Non-Techies: The Weak Link Is People"

  • Facebook
  • Twitter

Filed Under: WordpressWisdom Tagged With: security, wordpress, wordpresswisdom

Follow Us

Contact Us

FREE TECH NEWS AND TIPS

Get helpful tech news and tips via email. We’ll never spam you or share your information with anyone. Un-subscribe at any time for any reason.
  • This field is for validation purposes and should be left unchanged.

See Posts About ..

aws business cloud ddos dns domain name registration domain names email funny hosting internet legal monitoring networkstatus outage security spam sysadmin virtualization webdesign windows wordpress wordpresswisdom

Navigation

  • About
  • How Can We Help?
    • IT/Tech Consulting
    • Managed Cloud
    • Managed WordPress Hosting
    • Colocation/Datacenter
    • Shared Hosting
    • Spam Filtering
    • Denial of Service Attacks
  • Blog
  • Contact Us
  • Get Help

Gotham Bus Policies

  • Acceptable Use Policy
  • Privacy Policy
  • Copyright/DMCA

Recent Blog Posts

The Cloud For Non Technical People in About 90 Seconds (Audio)

WordPress Management for Non-Techies: The Weak Link Is People

LinkedIn Marketing – Really A Thing?

WordPress Management For Non-Techies: Proactive vs Reactive

Copyright © 2023 · The Gotham Bus Company

Copyright © 2023 · Executive Pro Theme on Genesis Framework · WordPress · Log in