Preserve headers/logos underneath 125 pixels high. It takes up beneficial viewing space, primarily for laptop users, that is ideal left for the good stuff to appear"above the fold" Take a cue from the massive businesses, straightforward logos completed nicely say it all. This is our #1 pet peeve - screaming logos and headers!
Finally, installing the fix wordpress malware virus Scan plugin will check most of this for you, and alert you that you might have missed. It will also inform you that a user named"admin" exists. That is your user name. If you wish, you can follow a link and find instructions for changing that title. Personally, I think that a strong password is enough protection that is good, and there have been no attacks on the numerous blogs that I run, because I followed those steps.
The approach, and the one I recommend, is to use one of the password creation and storage plugins available on your browser. I believe after a trial period, you need to pay for it, although RoboForm is liked by people. I use the free version of Lastpass, and I recommend it for those of you who use Firefox or Internet Explorer. That will generate this article passwords for you; you use one master password to log in.
There's a section of config-sample.php that's headed"Authentication Unique Keys." There are four definitions which appear within the block. There's a hyperlink within that section of code. You need to enter that link into your browser, copy the contents which you return, and then replace the keys you have with the unique, pseudo-random keys offered by the website. This makes it harder for attackers to automatically generate a"logged-in" cookie for your site.
Install the WordPress Firewall Plugin. Stop and this plugin investigates web requests with WordPress-specific heuristics that are simple to recognize attacks that are obvious.
I prefer using a WordPress plugin to get the work done. Just make sure is able to do select backups, has restore and can replicate. Be sure that it is often updated to keep pace. There's absolutely no use in backing your data up to a plugin that's out of date, and not functioning.