The easiest, most effective way to secure WordPress in seconds.
very good plugin!
Whilst this is the better of the security plugins for WordPress, it does still have a few bugs in the latest version, mainly the lack of a working API for the Brute Force Attacks.
It would have been my security plugin choice, but:
a) it (v4.5.8) causes theme and plugin conflicts which are very difficult to identify
b) support forum on their webpage is not avalable for public, only for iThemes buyers
c) free support available here responde rather slowly. I saw some weeks old support issues which might be similar and relevant to my issue but not only solution but not a single response. a suggestion hasn't been posted yet.
iThemes Security is stable and plays well with nearly any plugin you're likely to use in your WordPress install. We've been using it for years. It does an excellent job of protecting our sites and closing vulnerabilities. We use it on a high-profile, high-traffic site (that was hit with a pharma hack a few years ago). Using this in combination with BP Security (and a few other tools), the bad guys have been kept out.
The basic, one-click setup is good. More advanced configuration can be confusing. Read and understand what each setting does. It's worth it to take some time protecting your sites now than to have to explain to your clients later why they are suddenly in the Vergara business....
It's powerful, but may use up a lot of server resources - cpu, memory, etc. Watch your resource usage with this one.
I can actually see the attacks that it is blocking in the log file. The only reason I don't give it 5 stars is the fact that it plasters all kinds of advertisements and pop-ups in WordPress that I have to scroll through or unpop every time I make a change.
I read all the reviews here and I thought that it was secure, I installed the plugin and followed all the "recommendations", even I changed the url of my login page but I had so much problems trying to login, it run my site very slow and several times I get blocked from my own site, I think that its a good plugin for security but you need to be very careful. I just wanted to share my opinion because I decided to disable the plugin.
This plugin is wonderful for blocking the use of wp-admin and wp-login pages. It also is helpful that it tells you what your risks are. The one complaint (but it's a big one) is the issue with the "Redirect Loop," where any https pages essentially are now un-viewable. What's funny is that in the Support forum, a user was able to come up with a solution and the author was not...
Also, when editing the settings, it scrolls you back to the top of the page every time you save, which sucks during setup when you want to get it done quickly to explore all the other options.
I liked "Better WordPress Security" better. I didn't have the headaches I get now. But I have figured out how not to have my email box swollen with constant Brute Force issues. Thousands of them, in fact. So we should be using this thing.
Away Mode and permanent ban of hosts is the gold that makes it possible to block the jerk-offs from Beijing, St. Petersburg, the onion routers zinging in from the middle of Siberia...etc. etc. But it's a major pain to have to always be in Away Mode. What's worst about it is I travel too much, don't always remember when I should log in to change my Away time.
But the funky work around is this--go via ftp to your plug-ins folder. It's in there, still under the same folder name titles "Better WP Security". Just rename that folder to whatever. Then you can get back into your own Dashboard whenever you need to. Then don't forget to Whitelist your IP in Settings.
Furfacksake, I wish the support form would be more robust so we can see better implementation of what's basically a good set of tools. They just need refining. There is a suggestion forum--https://trello.com/c/EDSRmJvT/41-start-here-what-to-expect-how-to-request-features--that seems to be the place where we can beg for a better set of features in the free version. I'm not spending my $ on anything till I see the basics work a lot better than this.
It's best top plugin that save our web from hacked and malware.
i recommended it to you for wordpress user.. :D
[ link redacted, please do not post links in reviews ]
3 stars for good features, missing 2 stars for stuffing plugin with promotional stuff and breaking websites for no reason.
You must log in to submit a review. You can also log in or register using the form near the top of this page.