How to Keep WordPress Locked Down with Duo Security

Duo Security

WordPress blogs are one of many targets for hackers, and with so many people making simple mistakes, it becomes clear why. There are many ways of protecting your blog, and weโ€™ve outlined five mistakes you might be making.ย While using a stronger password or keeping your plugins and theme updated tend to be common advice, you can take additional measures. In fact, you can ensure that absolutely no one, even if they were to get your password, will ever be able to access your blog.

Two-factor authentication is a wonderful thing, and was first used in the workplace to protect sensitive data. Nowadays, companies like Google or Microsoft offer the functionality, and all thatโ€™s required is a mobile phone.ย How it works is when you go to login someplace, and have two-factor authentication enabled, you are required to enter a special pin. For example, Google has its โ€œAuthenticatorโ€ app which you fire up to see the special pin, or you can opt to receive a text message or phone call instead.ย A special pin isnโ€™t always required, and Twitter recently implemented its own solution which involves approving a trusted device.

Thanks to the help of Duo Security, you can bring this same functionalityย to your WordPress blog.ย With Duo, you can approve or deny logins with the tap of a button, or use a special pin delivered through the app or via SMS. Once youโ€™ve installed and activated the plugin, click on its โ€œSettingsโ€ from the plugin page.ย Before you can start benefiting from Duo Security, you have to setup an account on the appropriate website which is listed on the settings page.

While Duo does offer a free trial on its paid plans, it has a free โ€œPersonalโ€ plan which supports up to 10 users, plenty for the average WordPress user.ย Once youโ€™ve signed up, make sure you activate your account via email. From there, youโ€™ll create a password, and add your phone number. Duo Security verifies your identity via phone either by calling or sending you a text message with a special pin. Now that your identity is verified, itโ€™s time to setup your blog.

Duo Security

After verifying your identity, you should have been redirected to a page that says โ€œNew Integration.โ€ Where it says โ€œIntegration type,โ€ click on the box and scroll down to the bottom to select โ€œWordPress.โ€ Next to โ€œIntegration name,โ€ add whatever name youโ€™d like, and then hit โ€œCreate Integration.โ€

Duo Security

This is where you receive the integration key, secret key and API hostname that needs entered on the pluginโ€™s settings page via your blog. Simply copy and paste over the appropriate details, and then click โ€œSave Changes.โ€ Once youโ€™ve saved changes, switch back over to the Duo Security website, and under โ€œIntegrationsโ€ on the left hand side, select โ€œUsersโ€.

Duo Security

On the top right, click the green button that says โ€œNew user,โ€ and once youโ€™ve created a username, click โ€œAdd user.โ€ Scroll down to where it says โ€œAdd phone,โ€ and add your phone number. Next to โ€œTypeโ€ select โ€œMobile,โ€ and next to โ€œPlatformโ€ select your appropriate mobile operating system. Once youโ€™re finished, click โ€œSave Changesโ€ and under your phone number in large text, you should now see a link that says โ€œActivate Duo Mobile.โ€

Duo Security

Click the activation link, select the button that says โ€œGenerate Duo Mobile Activation Code,โ€ and then โ€œSend Instructions by SMS.โ€ The installation instructions will help you to download and install the appropriate app while the activation instructions are what you use to successfully add your account to the app. Duo Security works on all major mobile operating systems such as Android, iOS, BlackBerry and Windows Phone.

See Also
person holding ballpoint pen writing on notebook

Once your account has been added to the app by clicking the link in the activation SMS, your blog is ready to benefit from two-factor authentication! To test it, log out of WordPress, and sign in as you normally would. Now, youโ€™re met with the Duo Security prompt.

Duo Security

I recommend logging in by way of โ€œDuo Push.โ€ย With Duo Push selected, click the blue login button. Your phone will then get an alert about a login request, and all you have to do to accept is click the Duo Push button within the mobile app, and then click the green โ€œApproveโ€ button. In a matter of seconds, youโ€™ll automatically be logged into your blog.

Duo Security

With just 5 to 10 minutes of setup time, Duo Security adds an extra level of security to your Wordpress blog that really canโ€™t be beat.

Photo credit: Davide Del Vecchio

Feeling stuck in self-doubt?

Stop trying to fix yourself and start embracing who you are. Join the free 7-day self-discovery challenge and learn how to transform negative emotions into personal growth.

Join Free Now

Picture of Mike Stenger

Mike Stenger

Mike Stenger is a writer with a love of all things technology.

RECENT ARTICLES

TRENDING AROUND THE WEB

People who stay fit and active into their 70s and beyond usually adopt these 8 daily habits

People who stay fit and active into their 70s and beyond usually adopt these 8 daily habits

Global English Editing

People who had poor self-worth as a child usually display these behaviors later in life, according to psychology

People who had poor self-worth as a child usually display these behaviors later in life, according to psychology

Global English Editing

9 signs a woman was raised by good parents, according to psychology

9 signs a woman was raised by good parents, according to psychology

Global English Editing

4 zodiac signs who live life with discipline and self-control

4 zodiac signs who live life with discipline and self-control

Parent From Heart

Psychology says if you master these 8 skills, you will be happier as you get older

Psychology says if you master these 8 skills, you will be happier as you get older

Hack Spirit

8 phrases a master manipulator will use to keep you off balance, according to psychology

8 phrases a master manipulator will use to keep you off balance, according to psychology

Small Business Bonfire