101 Tips for WordPress Website to make Successful, Secure and User Friendly – Part 2

11. Use Custom Permalinks to get SEO benefit

Make your URL easy to be in search

Use the post name permalink option

To set this, go to Settings > Permalinks and select Post Name

12. Keep Your WordPress Installation Clean

If you are changing theme or layout you may use WP Reset Plugin to clean the unwated files and setting in your WordPress installation

Download WP Reset here:

13. Add Password Security to WP Admin Directory

Step 1: Log in to your website’s cPanel account.

Step 2: Under Files, find Directory Privacy.

Setp 3: Find the folder called wp-admin

Step 5: Activate the option “password protect this directory”

14. Hide wp-includes, wp-content, and wp-uploads

Try going to yourwebsite.com/wp-includes/js/jquery/

If you don’t disable it, malicious individuals can find out what kind of themes and plugins being used at your website’s

In your website’s root directory, edit your .htaccess file and add this code at the bottom:

Options -Indexes

Save your .htaccess file and you’re good to go!

15. Change Media Upload Directory

You can easily do that by adding a line of code to your wp-config.php file

Add this code right after require_once( ABSPATH . ‘wp-settings.php’ ); in the wp-config.php file:

define(‘UPLOADS’, ‘media’);

For more :

Ref Article: https://www.webnots.com/change-default-media-upload-folder-wordpress/

16. Open All External Links in New Window

Add a noreferrer and noopener attribute to all external links

Install a plugin called WP External Links:

For the Open external links option, select each in a separate new window or tab

17. Check Broken Links

Broken links can hurt your website’s SEO

You can use the plugin called Broken Link Checker:

18. Integrate Human Verification System

You can use ReCaptcha to to verify ‘I am not a Robot’ to safeguard your website for unwanted login attempts.

Watch this complete video on How to Integrate Google ReCaptcha:

19. Limit Login Attempts

To protect your WordPress Website from brute force attacks and hackers you can use

plugin called Limit Login Attempts Reloaded

Download Limit Login Attempts Reloaded here:

20. Add Two-Factor Authentication

You can use Two-Factor Authentication that makes it impossible for anyone to login to your WordPress site.

You can use a plugin called Two Factor, downloaded here: