I probably login to 5 different WordPress sites every day and I’m becoming concerned about the lack of login security being used by clients. The username is admin, the passwords are words that aren’t hard to guess, the same password is used in WordPress, ftp and for the MySQL database and they don’t change the login after I have completed working on the site.
So, this post is going to be a gentle nag and is going to include a couple of basic security tips.