Better Tighten up your Wordpress

[ronnie]

I learned the hard way today that Worpdress is not all that secure, by default. Course one of my blogs got hacked. Also the fact that I was lazy and should have set up better passwords. Guess it was a nasty little wake up call. Spent some time and changed all my blogs, should be a little tougher now.

So I post to maybe wake up others, or find out I was the only lazy one..:)
After looking at the default passwords WP outputs, they really are not very secure.

Too bad you can't change the username. Has any one done that?

[Simon]

Ronnie - you can create a new user with admin level access, and then you can delete the "admin" user automatically created.

Tip: create an admin user whose name never appears on blog posts or anywhere public, and make it a hard to guess username.

[Tekster]

Hey, thanks Simon, never thought of removing the admin user.

[ronnie]

I didn't think of removing the admin either. Thank you also Simon.

With the new passwords, they are pretty tough, so it's a start.