Which WordPress Security Plugin Should You Use? All In One WP Security and Firewall Walkthrough

[@indigetal]

ReCaptcha V3 is not available but I love the Firewall rule interface and the file permissions functionality was more streamlined then iThemes Security Pro. Not even the premium version of AIOS includes just in time firewall rule updates or automatic malware removal, but the premium version does regular malware scans. As you mention in another video it pairs well with MalCare and, given that, I don't see a need for the premium version of AIOS.

[@DavidMcCan]

Thanks for sharing this info and your thoughts.

[@securityranger773]

Hi David, really interested in this series. I'd like to get your thoughts, if you have room for one more, on Shield Security?

[@DavidMcCan]

Shield Security looks pretty feature complete. I've already written the companion article which looks a a number of options. I'll keep Shield Security in mind and will give it a try if I get the chance.

[@ylyaskudratullayev]

Does it impact on SEO?

[@DavidMcCan]

Security plugins shouldn't impact SEO as long as they don't block legitimate search engine crawlers.

[@azrulnaqeeb]

Love all the amazing features but I don't really know how to manage the feature that detail. Was looking for something simpler than this. Anyways thanks

[@DavidMcCan]

Try BBQ from the WP plugin directory. I have a video on it also.

[@azrulnaqeeb]

@@DavidMcCan Thanks David

[@jaichugani8607]

Hi David, I have the pro version of BBQ Pro, login lockdown & 2-factor authentication - do I still need this plugin?

[@DavidMcCan]

What you have is a good minimum solution of a simple site. There are different approaches and it partly depends on hosting and the type of website. Some high-end hosting providers add extra security for you. Also, if you are selling on the site or it is a membership site then you might want to go further. You might check if your login protection plugin includes protection for XML-RPC. That is another way you can log into a site. It is not used much these days and often security plugins will have a way to disable it if it is not being used.

[@jaichugani8607]

@@DavidMcCan Thanks Peter. That helps a lot. I have XML-RPC protection using a code through a script in Code Snippet. As I'm building a WP multisite membership site, would you recommend I disable all security codes & purely depend on BBQ Pro + All In One Security & Firewall + Bad Protection plugin? Insecurity Security & WP Fence seem to use a lot of resources.

[@DavidMcCan]

@@jaichugani8607 - The higher resource usage for Wordfence would make me pause about using it on a multi-site. In the plugins you are thinking of adding there is no two factor authentication, if you thought you might use that.