Care & security
Download themes and plugins from accountable sources
Know who supplied the package before installing it.
Open guide ↗Independent WordPress guides
Care & security
Maintain access, updates and recoverable copies.
Care & security
A staging site needs its own access boundary
A hidden address and a noindex setting are not authentication.
Open guide ↗
Care & security
Decide what an activity log should answer
Choose useful events and a manageable retention period.
Open guide ↗
Care & security
Understand the limits of personal-data export tools
WordPress tools cover participating components, not every connected service.
Open guide ↗
Care & security
Build a maintenance calendar that fits a small site
Give recurring tasks an owner and a visible result.
Open guide ↗
Care & security
Keep the accounts that control your site documented
Ownership can be scattered across services even when the website looks unified.
Open guide ↗
Care & security
Do not leave downloadable backups in public folders
A backup can expose more information than the visible website.
Open guide ↗