Care & security
Set up two-factor recovery before losing a phone
Protect the recovery route as carefully as the normal login.
Open guide ↗Independent WordPress guides
Care & security
Maintain access, updates and recoverable copies.
Care & security
Check the recovery email for your administrator account
A reset link is useful only when the right person can receive it.
Open guide ↗
Care & security
Treat application passwords as separate credentials
Give each integration an identifiable credential and a removal plan.
Open guide ↗
Care & security
Remove access without losing the author's content
Separate access revocation from the fate of published work.
Open guide ↗
Care & security
Review old accounts with a purpose
An unfamiliar username needs investigation, not an automatic deletion.
Open guide ↗
Care & security
Read a security alert before changing everything
Confirm the affected product, version and recommended action.
Open guide ↗
Care & security
What to preserve when you suspect a compromised site
Contain the problem while keeping evidence for the investigation.
Open guide ↗
Care & security
Why broad file permissions are a poor quick fix
Resolve ownership and required access instead of making everything writable.
Open guide ↗