WordPress runs a large share of the web, which also makes it a common target. These steps keep a WordPress site on SoftoChain safer, using tools already included in your hosting.
1. Keep everything updated#
Update WordPress core, themes and plugins regularly. Most hacked sites run an old plugin with a known security hole. Delete plugins and themes you no longer use instead of only deactivating them.
2. Use strong, unique passwords#
Use a long, unique password for the WordPress admin, your SC Panel login, FTP and email accounts. A password manager makes this easy. Do not use "admin" as the username.
3. Always use HTTPS#
Free Let's Encrypt SSL is included. Enable it in SC Panel and make sure your WordPress address starts with https:// under Settings → General.
4. Run a current PHP version#
Our servers offer PHP 8.4 and 8.5, which still receive security updates. Check that your theme and plugins support them.
5. Know where your backups are#
Daily backups run automatically and the last 3 are kept. Before a big change, download your own copy as well, so you can restore even if a problem goes unnoticed for several days.
6. Test changes on staging first#
Use the Staging tool in SC Panel to copy your site to staging.yourdomain.com. Try updates there, then push them live. A backup of the live site is taken automatically before each push.
7. Install plugins only from trusted sources#
Download themes and plugins from WordPress.org or the developer's official site. "Nulled" (pirated) premium plugins often contain malware.
8. Limit login attempts#
A security plugin that limits failed logins and adds two-factor authentication stops most password-guessing attacks.
If your site is hacked#
Contact us on WhatsApp at +880 1316-982133 or support@softochain.com, and we will help you restore a clean backup.