WordPress Security Checklist for Real Estate Agents

WordPress Security Checklist for Real Estate Agents

WordPress Security is no longer an option. It seems you hear about someone’s website being hacked just about every day. In many cases, the real estate agent could have taken one or two steps to prevent the invasion. While hackers will continue to devise methods to infiltrate blogs and websites, the following checklist will help keep your WordPress site safe.

WordPress Security Checklist

  1. I’ve removed telltale signs that give hackers a clue about my site including:
    • The WordPress version within the website’s header. Don’t tell people what version of WordPress you are running, especially if your version isn’t up-to-date.
    • Remove your admin username and replace it with a unique username and password.
    • Remove the login link from anywhere on the site.
  2. I’ve secured my login and installed plug-ins and systems that do one or more of the following:
    • Limit the number of login attempts an IP address can use within a specific timeframe.
    • Add two-factor authentication, which will require you to enter an additional code to log in.
    • Rename the “wp-login.php” file to something else, such as “log-in.php” or “let-me-in.php” so that hackers cannot know the correct login URL.
  3. I’ve added SSL to my WordPress Admin.
    • Note: You will need to contact your web hosting company to have them implement a Secure Socket Layer (SSL) for your WordPress Admin area.
  4. I’ve established systems to:
    • Scan my site regularly for viruses and malware.
    • Update my plugins and WordPress software.
    • Backup my WordPress site regularly
  5. I’ve created a secure password to log into my website. It includes upper and lowercase letters, numbers and special characters. My password has nothing to do with me or my personal life, so it cannot be guessed, and I have a system to change it at least once every 90 days.
  6. I utilize reputable and trustworthy providers including:
    • Website designers and developers
    • WordPress theme developers
    • Ghost bloggers and guest bloggers
    • Virtual Assistants
      • Each provider is given a unique password and username, and administrative login information is changed after business with the provider is concluded.
  1. I’ve changed the default table prefix in the WordPress database or had it changed for me so that hackers cannot easily access my database.
  2. I’ve uninstalled and removed any and all unnecessary themes, plugins, and users.
  3. I’ve employed the services of a reputable hosting company with demonstrated security practices and systems in place and a reputation for secure hosting.
  4. I’ve created systems to ensure my backup system is working effectively and efficiently. Backing up your WordPress site isn’t a “set it and forget it” event. Create a system to regularly check to make sure your website is backing up effectively.

No blog or website is impervious to hackers. However, when you take these ten steps to protect your site, you’re drastically reducing your odds of trouble. It’s well worth the time and effort up front to protect your business down the road.

Do you need help securing your WordPress website from hackers? If so, we’d be happy to help you out. Set up a free strategy session by clicking here, and we can discuss your options.

Hosting & Domain Checklist for Real Estate Agents

Hosting & Domain Checklist for Real Estate Agents

Choosing your domain name, registering it, and finding a hosting solution can feel like an overwhelming process. Use this checklist to help you manage the process without missing a step.

Tip: Never, ever let a web design agency, digital marketing agency, virtual assistant, or anyone else purchase your domain for you. It should always be in your name and billed to your credit card.

Hosting & Domain Checklist

  1. I’ve created a list of potential domain names that end in .com.
    • My chosen names are all professional and support my business vision, brand, and mission.
    • They are easy to remember, easy to spell, and unique.
  2. I’ve identified a preferred domain registrar service.
    • GoDaddy is an excellent domain registrar service. However, I do not recommend using them for anything else, including hosting.
  3. I’ve registered my domain(s), including my primary domain name and relevant and supporting domain names. For example, business.com, business.biz, business.net
  4. I’ve double-checked to make sure my contact information is correct with my domain registrar.
  5. I’ve set my domains to auto-renew. This step prevents me from missing a notification email and accidentally losing my domain name.
  6. I’ve chosen to register my domain as public.
  7. I’ve verified my information in the Whois database.
  8. I’ve chosen a website host that meets my requirements, including:
    • Web space: the amount of storage your website will require on the web server.
    • Bandwidth: the measure of traffic, both into and out of, your website.
    • Price
    • Support, uptime, and backup
      • Telephone support
      • 24/7 customer support
      • Online trouble ticket/help desk system
      • Email support
      • High percentage of uptime
      • Daily automatic back-ups
      • Plan provides all the features I require
    • Secure Socket Layer (SSL), a protocol used to provide extra security for e-commerce transactions.
  9. I’ve set up my business email address with my website host or through Google’s GSuite service. It looks professional and uses my URL, such as myname@business.com.
    • Gmail is okay if you absolutely cannot get an email address with your domain.
    • AOL, Yahoo, Outlook, or any other free email providers are NOT okay. Not only will using one make you appear unprofessional, but it will also make you look like you are stuck in the tech stone age. As a real estate professional, your clients want to know that you are tech-savvy, and an AOL email says anything but.
  10. I’ve chosen a template, hired a designer, and/or put up a landing page so visitors will find information, rather than see a blank page. (This is our bread & butter. Reach out to us if you need help with setting any of this up).

Once you’ve completed these 10 steps, you’re ready to start creating content for your website and driving traffic to it. Congratulations!