Wordfence is a free plugin for WordPress best, and now it is a free plugin that specializes in security the most widely used.
The reason why it is used so much because with extremely good features that can limit many popular forms of attacks, such as Local Hack, XSS, SQL Injection and password functionality including dual layer auto scan malicious code on the host.
In this article, I will briefly introduce the function and using your Wordfence Security to secure your WordPress website better.
You can use this plugin with iThemes Wordfence Security Security for more specialized firewall.
The whole function of
Wordfence Security
Before use, please list your entire functions in Wordfence Security so you know it can be done, although we may not need to use all the functions.
Additional Falcon Engine technology to create a website caching to speed up to 50 times. If you use this function, remove the plugin WP Super Cache cache as, W3 Total Cache.
Compatible with other plugins and themes, such as Woocommerce.
Automatically lock the common attacks. For example, a website that uses Wordfence which was attacked and set them to block the attack, then your website will also block attacks.
Add two layers of password validation code over the phone, like Google account so.
Vulnerability scanning through security error "HeartBleed".
Mandatory other users on the website to use complex passwords.
Automatically scans WordPress source code, plugins and themes to detect malicious code. For the source, it will compare with the source code of WordPress to see if there is a change, it will inform you.
Set up a firewall to block common attacks and spammer users, such as posing as Googlebot.
Automatically lock the attacker was black listed by checking the Advanced IP, check out WHO IS domain.
Subscribe to the change of the file on the host and you can customize the auto repair if the file has changed.
Automatically scan and find some common malicious code such as 99, R57, RootShell, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx ... and a lot of other names.
Automatically scan pages on the website to see if paralyzed insert malicious code or not, and check whether the page has been listed on Google blacklisted or not.
Automatically finds and blocks suspicious malware.
Customize limit the bot can gather information website, to avoid being large botnet attack frequency.
Subscribe to real-time counter on your website, website statistics 404, changed and edited to remove content, ...
Subscribe to real-time statistics and visits based on the country.
Check the hard drive of the host information for a variety of DDoS attack will make your hard drive is full.
And some other minor functions.
Set Wordfence Security
I just guided through the main function, you can take the initiative to learn more other functions.
After installing the plugin Wordfence Security, they have taken the initiative to establish the important functions you need for your website to be safe.
You can go Wordfence -> Options and select the Security Level to set it manually, depending on the level, it is best if your website is normal, no one attacked, only select Level 2 only.
Block dangerous country
If your website is Vietnamese should actively blocking some hits from the countries where you do not need them in order to minimize their chance to attack.
To block countries you to Wordfence -> Country Blocking and select some countries you need to stop and then press Save Change.
Some countries should stop:
China
Russia
Israel
Turkey
Iraq
Iran
Germany
As for the remaining features you can actively explore coz it is not too difficult to understand where very own, Falcon Engine Cache function through because I did not say that it's unlikely to work on your website or not ( but I test it all worked well) so you can go to the Wordfence -> Performence to enable this functionality.
I wish you success!
![[Image: gskG9HV.png]](http://i.imgur.com/gskG9HV.png)
