WP login not secure?

Shop deals on ebay
Advertise with us
shop deals on amazon
Bed & Breakfast / Short Term Rental Host Forum

Help Support Bed & Breakfast / Short Term Rental Host Forum:

This site may earn a commission from merchant affiliate links, including eBay, Amazon, and others.
Morticia

Morticia

Well-known member
Joined
May 22, 2008
Messages
17,771
Reaction score
685
Logging into WP I see that the connection is not secure for the login id and pw. What changed? Anyone else see this?
 
Seems to show the https when I look.
Is this from WordPress or wouldn't it be based on the host we use that is hosting our (WordPress) site?
 
My WP login page for my website says
http://www.myownwebsite.com/wp-login.php
I guess it might say https if my website had an SSL certificate. So I guess it's a function of your won website setup, not something controlled by WP.
 
Yours has never been secured. Don't know why you thought it was. It has always been http...not https. Things are now changing and the company you are hosting with is now making all sites encrypted with https but to make your own personal site secure, you will need to install the Really Simple SSL plugin.
 
JimBoone said:
Seems to show the https when I look.
Is this from WordPress or wouldn't it be based on the host we use that is hosting our (WordPress) site?.
Click to expand...
Jim yours is secure. We installed the Let's Encrypt and the REALLY SIMPLE SSL plugin when the site was set up. You were ahead of the curve :)
 
EmptyNest said:
JimBoone said:
Seems to show the https when I look.
Is this from WordPress or wouldn't it be based on the host we use that is hosting our (WordPress) site?.
Click to expand...
Jim yours is secure. We installed the Let's Encrypt and the REALLY SIMPLE SSL plugin when the site was set up. You were ahead of the curve :)
.
Click to expand...
Thanks to your pointing me in the best direction
 
EmptyNest said:
Yours has never been secured. Don't know why you thought it was. It has always been http...not https. Things are now changing and the company you are hosting with is now making all sites encrypted with https but to make your own personal site secure, you will need to install the Really Simple SSL plugin..
Click to expand...
EmptyNest said:
Yours has never been secured. Don't know why you thought it was. It has always been http...not https. Things are now changing and the company you are hosting with is now making all sites encrypted with https but to make your own personal site secure, you will need to install the Really Simple SSL plugin.
Click to expand...
The login was secure, tho. Just the login page. It didn't used to have an x thru the lock. But, I will add the plugin and update my webmaster page for https.
 
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
 
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
I suggested it to hosting company to set it up as an auto function
and was told they had so many complaints they took it off. But I may be suggesting it again.
wordfence catches more than that on sites I monitor. I got so sick of all the emails I turned most of them off. I just don't have time nor do I charge maintenance fee. I am surely getting out of web design this year. I just can't keep up with it all and my chiro is sick of my weekly visits I think
wink_smile.gif

 
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
 
Morticia said:
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
.
Click to expand...
Wordfence is my big one. I have the pro version after my site got hacked last year and it took me 72 straight hours to fix it.
 
PhineasSwann said:
Morticia said:
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
.
Click to expand...
Wordfence is my big one. I have the pro version after my site got hacked last year and it took me 72 straight hours to fix it.
.
Click to expand...
I have wordfence installed as well (paid someone on fivver to do it.) But since the URL for login isn't standard, I don't really get attempts, plus there is the captcha to deal with. And of course there is no account called admin.
 
PhineasSwann said:
Morticia said:
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
.
Click to expand...
Wordfence is my big one. I have the pro version after my site got hacked last year and it took me 72 straight hours to fix it.
.
Click to expand...
I have WordFence pro also.
 
Morticia said:
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
.
Click to expand...
I thought we installed wordfence on yours
 
EmptyNest said:
Morticia said:
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
.
Click to expand...
I thought we installed wordfence on yours
.
Click to expand...
EmptyNest said:
I thought we installed wordfence on yours
Click to expand...
Yes, I have word fence, on both websites. There's a list of attempted login tries and the names they used.
They've gone beyond admin now and try some version of your website.
Helpful hints - don't use these as your login name:
  • Your own name
  • Your inn name
  • Any portion of your inn name
  • Your town name
All the recent attempts are focused around those.
 
Morticia said:
EmptyNest said:
Morticia said:
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords..
Click to expand...
PhineasSwann said:
May I also humbly suggest if you're not using two-step authentication (where you're texted a six-digit code to input during the login process) you consider it. My Wordfence tells me I get about one person a week trying to guess passwords.
Click to expand...
What plug in do you use? I have 2 websites and they both get lists of attempted log ins.
.
Click to expand...
I thought we installed wordfence on yours
.
Click to expand...
EmptyNest said:
I thought we installed wordfence on yours
Click to expand...
Yes, I have word fence, on both websites. There's a list of attempted login tries and the names they used.
They've gone beyond admin now and try some version of your website.
Helpful hints - don't use these as your login name:
  • Your own name
  • Your inn name
  • Any portion of your inn name
  • Your town name
All the recent attempts are focused around those.
.
Click to expand...
Yep makes sense. Let Wordfence just do its job. I don't obsess over it. Our hosting company owner shared with me some stats of what they capture before they even try those...mind boggling...but good to know hosting is taking care of us :)
 

Latest posts

Back
Top