My Website Security & Users

Website security is extremely important, because even small websites like Fright Attendant can be targeted by automated attacks that probe for known weaknesses.

Protecting a WordPress site helps prevent unauthorized access, malicious software, and unwanted changes to site content. Several basic steps can improve security a ton.

First, I can use strong, unique passwords for every account. Second, I can keep WordPress, themes, and plugins updated so amny known security vulnerabilities are patched. Third, I can use SSL to encrypt information traveling between the website and a visitor’s browser. Security plugins such as Wordfence, WP Activity Log, and Login LockDown also help by scanning for threats, recording activity, and limiting repeated failed login attempts.

WordPress user roles help control how much access each person receives. As the Administrator, I can manage the entire website, including users, plugins, settings, and content. An Editor can manage content across the site, an Author can write, publish, and manage their own posts, a Contributor can write and submit posts for review, and finally, a Subscriber has no editorial control but can check out the site like a normal end-user.

Assigning these roles gives each user only the access needed for their responsibilities, which helps reduce unnecessary security risks. Together, these practices create a safer and more trustworthy experience for the site’s visitors.