► Security & Backups 4

How do I secure my WordPress site? ►

Security is not optional — WordPress sites are regularly targeted by automated attacks. Here are the most important steps:

1. Keep everything updated

WordPress core, themes and plugins. Outdated software is the most common route for hackers.

2. Use strong passwords

Use a different strong password for WordPress, your email, FTP and your hosting control panel. Use a password manager like Bitwarden.

3. Install a security plugin

Wordfence (free version is excellent) adds a firewall, malware scanner and login protection.

4. Enable two-factor authentication

Add 2FA to your WordPress login using the WP 2FA plugin. Even if your password is compromised, attackers cannot get in without your phone.

5. Limit login attempts

Wordfence does this automatically, or use Limit Login Attempts Reloaded.

6. Change the default login URL

Using WPS Hide Login, change /wp-admin to something less obvious. This eliminates the vast majority of brute force attempts.

How do backups work? ►

Your hosting includes daily automatic backups of both your files and your database. Backups are retained for 30 days, meaning you can roll back to any point within the last month.

To access backups:

  1. Log into control.infinitelives.co.uk
  2. Select your package
  3. Go to Web > Backups

We also recommend installing a WordPress backup plugin (UpdraftPlus is excellent and free) to keep an additional copy in cloud storage like Google Drive or Dropbox.

My site has been hacked — what do I do? ►

Stay calm — it is fixable. Here is what to do immediately:

  1. Change all passwords — WordPress admin, FTP, hosting control panel, database and email
  2. Restore a clean backup — Go to your control panel backups and restore from a date before the hack occurred
  3. Scan for malware — After restoring, use Wordfence or Sucuri to scan for any remaining malicious files
  4. Update everything — WordPress, all plugins and themes
  5. Remove unused plugins and themes — These are often attack vectors
  6. Contact us — If you are unsure at any stage, get in touch and we can help

If you need urgent help, email 1up@infinitelives.co.uk with “URGENT” in the subject line.

How do I add an extra layer of security to my login page? ►

You can password-protect your WordPress admin directory at the server level, which stops attackers from even reaching your login page:

  1. Log into your control panel
  2. Go to Web > Password Protected Directories
  3. Navigate to the wp-admin folder
  4. Enable password protection and set a username and password

This adds a basic auth prompt before the WordPress login form — attackers will hit this barrier first.