Tips on securing a Wordpress hosted blog needed

Tip 1 - Uninstall disabled plugins and unused themes

Even if a theme or plugin is disabled it can still be accessed and executed on the main server. If you are not using a plug in or any other software you should uninstall it because hackers are always scanning websites to look for loopholes.

Tip 2 - Change your password every two weeks

You should make it a habit to change your passwords every two weeks to ensure safety of your Wordpress blog.

Tip 3 - Keep your core updated

Wordpress roles out updates regularly and if you are not keeping your core updated you are inviting trouble. A lot of security breaches are a result of outdated software. Updating your wordpress core barely takes a minute or two and is strongly recommended.

Tip 4 - Restrict access to the wp-config.php file

You can modify your htaccess file to hide the wp-config.php file and restrict access to it. Detailed instructions are given in the link I have shared.

Tip 5 - Use the Limit Login Attemps Plugin

The limit login attempts plugin prevents anyone from trying to hack into your site using brute force methods. Just install this plugin and set the number of incorrect tries you want to allow. This can be very effective against hackers.

Tip 6 - Don't use 'admin' as your main account

Most wordpress blogs have 'admin' as the main account which makes it easier for hackers to try passwords. Just change the main account to some other name.