The Best WordPress Security Plugin to
Secure & Protect WordPress
BUILT BY THE WORDPRESS SECURITY EXPERTS
iThemes Security Pro takes the guesswork out of WordPress security. You shouldn’t have to be a security professional to use a security plugin, so iThemes Security Pro makes it easy to secure & protect your WordPress website.
Secure WordPress with a Trusted WordPress Security Plugin
WORDPRESS PROTECTION WITH ITHEMES SECURITY PRO
Make sure your WordPress website is secure and protected with iThemes Security Pro. iThemes Security Pro works to fix common WordPress security issues you may not know exist. By adding an extra layer of protection, iThemes Security Pro helps give you peace of mind—and keeps the bad guys out.
WordPress Security Designed to Keep the Bad Guys Out
PREVENT WORDPRESS HACKS | WORDPRESS SECURITY BREACHES | WORDPRESS MALWARE | & MORE
WordPress Brute Force Protection
Limit the number of failed login attempts allowed per user with WordPress brute force protection. If someone is trying to guess your password, they’ll get locked out after a few attempts.
File Change Detection
If someone manages to get into your site, they’ll probably add, remove or change a file. Get email alerts showing any recent file changes so you know if you’ve been hacked.
If a bot is scanning your site for vulnerabilities, it will generate a lot of 404 errors. iThemes Security will lock out that IP after the limit you set (20 errors in 5 minutes by default).
Strong Password Enforcement
Set which level of users on your site (admins, editors, users, etc.) need to have strong passwords. Strong password enforcement is one of the best ways to lock down WordPress.
Lock Out Bad Users
Keep bad users away from your site if they have too many failed login attempts, if they generate too many 404 errors, or if they’re on a bot blacklist.
Not making changes to your site 24 hours a day? Harden WordPress by making the WordPress dashboard inaccessible during specific hours so no one else can sneak in and attempt to make changes.
Hide Login & Admin
Change the default URL of your WordPress login area so attackers won’t know where to look. This feature is also great to help clients remember their login link.
Schedule database backups and have them emailed to you. Or you can get our WordPress backup plugin to step up your backup game. Make complete backups and send them to off-site storage destinations.
Get email notifications when someone gets locked out after too many failed login attempts or when a file on your site has been changed.
REVIEW & TAKE ACTION ON USER SECURITY
User-level security is absolutely essential for protecting your WordPress sites. Poor security for just one WordPress user account can open up your entire building, or site, to vulnerabilities that lead to hacks.
Use iThemes Security Pro’s WordPress User Security Check to assess the security of all your WordPress user accounts at one time and take action on them if needed.
Poor security for just one WordPress user account can open up your entire building, or site, to vulnerabilities that lead to hacks.
- How do I upgrade from the free version of iThemes Security to iThemes Security Pro?
- Upgrading from the free version of the plugin to Pro is easy! After your purchase, you’ll receive an email with instructions on how to download iThemes Security Pro from the iThemes Member Panel. Install/activate Pro on your WordPress site, then deactivate/delete the free version. All of your settings will be preserved.
Why does iThemes Security require the latest WordPress version? Can’t I use a slightly older version?
One of the best security practices for a WordPress site owner is keeping software up to date. Because of this, we only test this plugin on the latest stable version of WordPress and will only guarantee it works in the latest version.
Can a WordPress security plugin completely stop all attacks on my site?
No. iThemes Security is designed to help improve the security of your WordPress installation from many common attack methods, but it cannot prevent every possible attack. Nothing replaces diligence and good practice. This plugin makes it a little easier for you to apply both.
Is “Security Check” feature good enough protection?
The Security Check feature is designed to help save you time and ensure your site is using the recommended security settings. After enabling this you should review all other features for further protection.
Is this plugin only for new WordPress installs or can I use it on existing sites, too?
Many of the changes made by this plugin are complex and can break existing sites. While iThemes Security can be installed on either a new or existing site, we strongly recommend making a complete backup of your existing site before applying any features included in this plugin.
Will this work on all servers and hosts?
iThemes Security requires Apache or LiteSpeed and mod_rewrite or NGINX to work. While this security plugin should work on all hosts with Apache or LiteSpeed and mod_rewrite or NGINX, it has been known to experience problems in shared hosting environments where it runs out of resources such as available CPU or RAM. For this reason, it is extremely important that you make a backup of your site before installing on any existing site. If you run out of resources during an operation such as renaming your database table, you may need your backup to be able to restore access to your site.Finally, please make sure you have adequate RAM if you plan to use the file change detector or make large backups.