Do These Three FREE Actions To Keep Your WordPress Website Safe – And Save Yourself Time and Money If Your Website is Hacked.

March 7th, 2019

Note: This post may contain affiliate links. Please see our disclosure page for more information.

I learned my lesson the hard way. Read my nightmare story about the time FOUR of my WordPress websites got hacked at the same time.

You can’t prevent evil hackers from attempting to infect your WordPress website. But there are THREE actions you can do to save yourself the headache, time and money of recovering your hacked website and cleaning your files of the malware. Today, I always do these three actions regularly to every website that I manage. So, I emphasize to you: DO THESE THREE ACTIONS REGULARLY. The good news is two of the three actions are automated and it does not cost you anything. You have no excuse!

IMPORTANT ACTION #1: Install Wordfence

Wordfence is a FREE WordPress security plugin software that protects your website from hacks and malware. You can upgrade to the premium account for only $99 a year, but the free version of Wordfence will protest your website 100%. Visit Wordfence’s website to read the details and download the plugin.

Why do you need Wordfence? Install the free version and you will see why you need the security. You will receive email notifications to let you know when someone has logged in to your WordPress website, PLUS you’ll get notified when someone attempts to log in to your WP website – it even tells you what username they tried, the country where the hackers are located, and how many times they tried to login in. The regular summary report will show you what files have been modified and what malware hackers attempted to upload.

IMPORTANT ACTION #2: Install UpDraft Plus

UpDraft Plus is a FREE WordPress plugin for scheduling regular automatic backups of your website files. It will also restore your website to one of your backups. Your backups are saved into the cloud of your choice. DropBox, Google Drive, Amazon S3 to name a few. There are more options in the paid version.

WHY DO YOU NEED UPDRAFT PLUS? Having a full backup of your website is how you will save time and money. When you don’t have a backup of your website prior to being hacked, you have no choice but to recover your broken website and if you are fortunate to recover it, you will need to clean your website by finding all the files infected with malware.

IMPORTANT ACTION #3: ALWAYS update files to the latest version of WordPress and all themes and plugins – especially Wordfence and Updraft Plus.

Don’t wait to update outdated versions of WordPress and your themes and plugins. Hackers know when new versions become available. You will leave your website vulnerable if you wait. You can have WordPress, Wordfence and Updraft Plus automatically update when there are new versions.


Can you log in to your WordPress website’s admin account? If yes, go to your UpDraft plugin settings and restore your website to an older version that you are confident is clean and was saved prior to the hacking incident. Once you have restored your website to a previously backed up version, UPDATE WORDPRESS AND ALL THEMES AND PLUGINS. Then go to Wordfence and Run A Scan to make sure your files are clean.

If you installed Wordfence but you don’t have a full backup of your website (using Updraft Plus or any backup plugin software): Go to your Wordfence settings and Run a Scan. Have Wordfence fix repairable files and throw away infected files. Run a Scan again until it shows your files are clean. Now, UPDATE WORDPRESS AND ALL THEMES AND PLUGINS and INSTALL UPDRAFT PLUS.
If Wordfence can’t completely repair your website files and it detects that infected files exist on your website, read my story: “How I Recovered Within 24 Hours When FOUR of my WordPress Websites Got Hacked”. I share my miracle solution that can clean and restore your hacked website within hours.

If you can’t load or log in to your WordPress website and you are pretty sure your website has been hacked, read my story: “How I Recovered Within 24 Hours When FOUR of my WordPress Websites Got Hacked”. I share my miracle solution that can clean and restore your hacked website within hours.

Leave a Reply