Use HTTPS everywhere
An SSL certificate encrypts the connection between your visitors and your site, and browsers warn people away from sites without it. Make sure every page loads over HTTPS and that the old HTTP address redirects to it.
Keep backups, and test them
Automatic daily or weekly backups stored away from your web server are your safety net. A backup you have never tried restoring is only a hope, so test one occasionally.
Update everything
Outdated themes, plugins and scripts are the most common way sites get hacked. Apply updates promptly, and remove plugins and tools you no longer use.
Use strong, unique logins
Use long, unique passwords for your hosting, email and website admin, turn on two-factor sign-in where it is offered, and never share one admin account among several people.
Limit who has access
Give team members and vendors only the access they need, and remove it when they leave. Old accounts are an easy way in.
Protect your forms from spam
Contact forms attract bots. A hidden honeypot field, a minimum fill-time check and a limit on submissions per visitor stop most spam without annoying real customers.
Choose reliable hosting
Good hosting includes current software, firewalls and support that responds. The cheapest plan can cost more if your site is down or compromised.
Have a plan for the day something goes wrong
Know who to call, where your backups are and how to restore them. A monthly maintenance plan means someone is already watching your site.
We offer ongoing care for websites, including backups, updates and monitoring. See our website AMC article or talk to us about protecting your site.