WordPress Security Plugins – WordFence

WordPress Security Plugins

New or old to WordPress, if your site doesn’t have a security plugin installed, your site is vulnerable to attacks. Today, I am going to focus on a couple of great WordPress security plugins. We will walk through the complete set up these plugins to optimize the performance of your site.

WordFence

WordFence - WordPress Security Plugin

WordFence – WordPress Security Plugin

 

I am an advocate for WordFence. Not only is it a great plugin that provides security to WordPress, but it also provides page caching as well as real time traffic reports. Some of the options are only available in the pro version. Unfortunately, we won’t cover the pro version features today.

Let’s take a look at how to set it up.

After installing and enabling WordFence, click the WordFence admin panel in the main admin panel of WordPress.

Let’s start with the Firewall. First of all, you can either go through the tour or end the tour. For the sake of this post, we will end the tour.

WordFence Firewall

First, click the box that is yellow that says Learning Mode. Change that to Enabled and Protecting and click save.

WordFence Firewall - WordPress Security Plugins

WordFence Firewall – WordPress Security Plugins

 

WordFence Firewall - WordPress Security Plugins

WordFence Firewall – WordPress Security Plugins

 

WordFence Firewall - WordPress Security Plugins

WordFence Firewall – WordPress Security Plugins

 

Next, you can choose to Optimize the WordFence Firewall. WordFence is able to conduct tests to determine your server configuration. Click the continue button.

WordFence Firewall - WordPress Security Plugins

WordFence Firewall – WordPress Security Plugins

 

First, we will arrive on a screen to continue but we must download .htaccess first in order to continue. Click Download .htaccess and Continue.

WordFence Firewall - WordPress Security Plugins

WordFence Firewall – WordPress Security Plugins

 

This will fully optimize WordFence Firewall.

WordFence Firewall - WordPress Security Plugins

WordFence Firewall – WordPress Security Plugins

 

WordFence Performance Optimization

Now that the Firewall is optimized, let’s take a look at how to optimize our site for the best performance. During this tutorial, I am going to utilize a free resource on the web, http://pagespeedgrader.com to look at the before and after results of our page load time. As a result of these tests, we should observe if WordFence actually delivers on increasing our page load time.

First of all, let’s look at our benchmark speed.

Our initial benchmark load time was 3.41 seconds. Additionally, our score was 73%. These results are from using the twentysixteen theme on a default WordPress site with the Hello World post and the Sample Page.

PageSpeedGrader Benchmark Test - WordPress Security Plugins

PageSpeedGrader Benchmark Test – WordPress Security Plugins

 

By selecting the second option, Enable Basic Caching – 2-3 times faster, our page load time decreased by 1.5 seconds and is now 1.91 seconds. Consequently, our score also decreased to 71%. I will cover bringing your score back up in a later post.

 

Performance 2 - WordPress Security Plugins

Performance 2 – WordPress Security Plugins

 

Pages Speed Grader - WordPress Security Plugins

Page Speed Grader – WordPress Security Plugins

 

Whenever we enable the final option, Enable Falcon Engine, you will prompted to download a backup of .htaccess before you can continue. Download .htaccess and proceed.

WordFence Performance Settings - WordPress Security Plugins

WordFence Performance Settings – WordPress Security Plugins

 

After enabling Falcon Engine, the page load time decreased to 1.62 seconds but our score increased to 80%. Because this is a WordPress security plugin it comes as a surprise that it allows us to cut our page load time by just over 50%.

You can check out your own page load times and site score at http://PageSpeedGrader.com.

Live Traffic

Because you can observe the traffic to your site and can determine if the traffic is from a human, a bot, or even if blocked traffic is trying to access your site, you have the ability to block the ip address or network from accessing your site.

WordFence Live Traffic - WordPress Security Plugins

WordFence Live Traffic – WordPress Security Plugins

 

WordFence Live Traffic – WordPress Security Plugins

WordFence Live Traffic – WordPress Security Plugins

 

Scan

WordFence gives you “antivirus” protection on your site by searching every file within the installation searching for malicious code. Also, there is an option to scan each file as if it were executable. Finally, there is also an option to scan directories outside of WordPress.

WordFence Scan - WordPress Security Plugins

WordFence Scan – WordPress Security Plugins

 

Learn more about WordFence at https://wordpress.org/plugins/wordfence/.

Comments

comments

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.