IThemes Security is a relatively silly, simple set of options that can be turned on or off in a series of simple ways to quickly make your site safer. Itheme simplifies the complex security steps and provides a brief description of each operation so you can get an accurate picture of what’s happening on your site.
IThemes Security Pro Plug-in Core Features
WordPress Brute Force Protection Use WordPress Brute Force Protection
Limit the number of failed login attempts allowed per user. If someone tries to guess your password, they will be locked down after a few attempts.
File Change Detection
If someone tries to get into your site, they may add, delete, or change files. Get an email alert that shows any recent file changes so you know if you’ve been hacked.
404 detects
If a bot is scanning your site for vulnerabilities, it will generate a large number of 404 errors. IThemes Security will lock the IP after the limit you set (default 20 errors in 5 minutes).
strong password enforcement
Set which levels of users on your site (administrators, editors, users, etc.) require strong passwords. Strong password enforcement is one of the best ways to lock WordPress.
locking
Bad users If bad users fail too many login attempts, generate too many 404 errors, or are on the bot blacklist, keep them away from your site.
away mode
No changes to your site are made 24 hours a day? Enhance WordPress by making WordPress dashboards inaccessible at specific times so others can’t sneak in and try to make changes.
Hide Login and Management
Change the default URL of your WordPress login area so that attackers don’t know where to look. This feature also helps customers remember their login links.
database backup
Schedule database backups and email them to you. Or you can get our WordPress Backup plugin to enhance your backup game. Take a full backup and send it to an offsite storage destination.
email
Get email notifications when someone is locked after too many failed login attempts or a file on your site has been changed.
IThemes Security Pro Plugins Allow WordPress Two-Factor Authentication
With IThemes Security Pro’s WordPress two-factor authentication, users need to enter a password and a secondary code that is sent to a mobile device such as a smartphone or tablet. A password and code are required for successful login to the user account. Two-factor authentication adds an extra layer of WordPress security to verify that it’s actually you logged in and not someone who gets access to (or even guessed) your password.
mobile
Applications IThemes Security Pro plug-in works with common two-factor authentication mobile apps such as Google Authenticator, Authy, FreeOTP and Tooper.
EMAIL
The time-sensitive code is provided via e-mail to the e-mail address associated with the user account.
backup code
Provides a set of one-time use codes that you can use to log in if the primary two-factor method is lost.
