SSL, passwords & backups — the simple layers that keep your site safe
Your site stays online. Visitor data stays private. Nobody can secretly change your site.
SSL encrypts the connection between your visitor and your server. Without it, browsers flash 'Not secure' and visitors leave.
Most small-site hacks exploit outdated software, not genius attacks. Update your CMS, themes and plugins.
A long, unique admin password plus two-factor authentication blocks the bots guessing logins day and night.
Automated daily backups stored somewhere separate turn a disaster into an inconvenience. You can always restore.
SSL doesn't stop hacks or malware — and phishing sites get padlocks too. SSL is the foundation, not the whole building.
Brute-force logins. Malware injection. Phishing emails aimed at you. DDoS floods. Basic layers blunt all four.
Change all passwords from a clean device. Put the site in maintenance mode. Contact your host and restore a clean backup.
The complete beginner's walkthrough — zero jargon, no fear-mongering.