I just got this info from my Web Support Team and as a new user to Wordpress I found it very insightful! (My Magazine runs off Typepad Pro.. which never has these issues)

Here is his info. (Jay Vikaz) to share with you.


Many of you have wordpress blogs or websites that run on wordpress. As you may have heard wordpress is prone to malicious attacks that could cripple your site and hurt business.

While there are many things that you can do to protect your wordpress site, I’d like to share with you the two most basic steps that will act as your first line of defense and ward off around 90% of the attacks on your site.

Step 1:

1. Login as the default “Admin” user. Create another user with a complex user name (atleast 10 characters in length - using numbers, special characters and Caps)



2. Create a complex Password for this new user (atleast 10 characters in length - using numbers, special characters and Caps). Make sure it is different from the username.



3. Grant Administrator Privileges to the new user then delete the default “Admin” user.



4. From this point on the “Admin” user will not exist and the new user you created will be your admin.

Step 2:

1. Install Akismet plugin.

These two steps should give you a layer of protection most other blog owners don’t take the time to set up until they are hit.


Tip: Create a user different from your new admin user to do your blog. The new admin login should be used only for blog setup and administrating activities and not for blog posts.