WordPress security in a few easy steps
4. Make use of least privileged ideas
The WordPress.org crew has put collectively a nice article in the WordPress Codex relating to Roles and Capabilities. We encourage you to learn it and turn into accustomed to it as a result of it applies to the next step.
The idea of Least Privileged is straightforward. Solely give permissions to:
- people who want it,
- after they want it and
- just for the time they want it.
If somebody requires momentary administrator entry for a configuration change, grant it, however then take away it upon completion of the duty. The excellent news is you don’t need to do a lot right here, apart from make use of greatest practices.