Secure Admin Plugin Shuts Down Login

Wednesday, January 13th, 2010 at 10:53 pm

Lock up your Log-in.

Do it now.

It’s your drill Sargent yelling the order.

Ignoring this suggestion is becoming the bird at the cat convention. Never knowing when the strike will happen or how vicious. Praying the cats don’t notice your high traffic blog.

Here’s how you’ll quickly lock up your Admin and log-in screen.

It’ll get you up flying above the cats, quickly locking up your Admin and locking down your login page. Helping keeping the hobby hackers at bay.

However because cats can climb and leap into the air, you can’t let your guard down. Taking these tips as a couple of steps along the way in securing your Word Press blog from unwanted entry and attacks.

Logging in as Admin ? We’ll Change it now.

In a moment you’ll be creating a new user name for your Administration account, testing it and if working ok then locking for security reasons. Meaning no one can log into using the old Admin account.

Lets get started

Log-into your WP admin account.

When logged in find “Users” from the list on the left, then Add New User.

Fill out the form as you will be creating your new administrator name and defiantly don’t call it Admin. Before saving, change the “Role” to Administrator then click Add User.

When your new Admin name is saved look to the left for the name “Users” and click it.

Here you’ll see your old Admin user name and your new administrator user name.

Log out of WP and log into WP again now using your new user name and password.

If it works, great. If not log in with your old Admin user name then fix and try again.

When your new log-in works. do stay logged-in and go into Users – Authors & Users.

Then under your (OLD) Admin click the edit link.

Under Role: change from administrator to “No role for this blog” then go to bottom of page and find
“User account locked “and click the little box “User account is locked for security reasons”.

Then click Update User and you’re done.

Quickly slam the door using User Locker plug-in

Keep your head down as we get moving on seeing if you’ll be the victim of an upcoming dictionary attack. Then taking action, putting up your blogs defense against up coming dictionary attack.

You know, if you forget your password it’s no problem as you can keep trying until you get it right. If it takes 7 or tons of times but when right – you are in.

Then it’s a good bet you’re a sitting duck waiting for a brute forced dictionary attack.

The attack taking place live on your blog’s log-in at some unknown time and only your imagination seeing how brutal. A ditto image of me a couple of days ago. Yes, it’s why we’re having this talk now.

Running a dictionary attack on you.

Briefly it’s automatically running words from the dictionary then in different combos until the right combo is hit. Allowing entry and running loose causing havoc across your blog. Guess they could even change your password on you.

Ouch!

Quickly Shuts Down Login Plugin

Here is how you can rest easy from this fear of being hit from a dictionary attack using a little plug-in which will get shutting down your login fast.

Look out, it’ll even do it on you if you forget.

It doesn’t care who you are. If you don’t know your user name and or password you’re not getting in.

The lock out plug-in allows you to set a limit on the number of tries you will allow logging in before the door gets slammed shut in their face.

Any further login attempts won’t happen.

They must request a new password via a verification link which is sent to registered users registration email.

Again stopping the attacker, because we’ll assume they don’t have access to the real register persons email account. Thus are unable to verify and the login remains locking them out.

If you forget your login, as it does happen you too will be locked out. But you’ll easily verify the email sent to you, quickly resetting your password and flying through logging into your blog.

It’s similar to security before getting on an airplane.

If you know your user name and password it’s your ticket in. If you stumble a few attempts you can try again as we all stumble sometimes.

But if stumble one to many times – walls go up – login shuts down and “who ever” isn’t getting through.

Get User Locker plug-in now controlling your user log-ins now.

Listen.

Hear your Drill Sargent.

Do it. Quickly getting your WordPress blog under User Locker security plugin now.

Enjoy