Website security basics every small business should know
A hacked website can lose you customers and rankings overnight. These simple steps keep most small business sites safe.
Most small business websites are not hacked because someone targeted them personally. They are hacked by automated tools scanning the internet for easy weaknesses: old software, weak passwords and forgotten plugins. The good news is that a few basic habits block most of these attacks.
Why it matters for SEO
If your site is compromised, Google may show a warning to visitors or remove pages from results. Hacked sites are sometimes used to send spam or host scam pages, which can damage your reputation long after the problem is fixed.
The essentials
1. Keep software updated
Update WordPress, your theme and every plugin regularly. Most successful attacks use problems that were fixed long ago in an update the site owner never installed.
2. Remove what you do not use
Deactivated plugins and old themes can still be a risk. If you do not need them, delete them.
3. Strong passwords and two-factor login
Use a unique, long password for your website admin and hosting account, stored in a password manager. Turn on two-factor authentication wherever possible.
4. Limit who has admin access
Give people the lowest level of access they need, and remove accounts for anyone who no longer works with you.
5. Use https everywhere
Your site should always load with the padlock. Most hosts provide free SSL certificates.
6. Automatic backups
Keep daily backups stored away from your website, and make sure you know how to restore them. A good backup turns a disaster into an inconvenience.
7. Be careful with file uploads and forms
Contact forms should have spam protection. Avoid plugins that let visitors upload files unless you really need them.
Signs your site may be compromised
- Strange pages appearing in Google results for your domain.
- Visitors being redirected to other sites.
- New admin users you did not create.
- Warnings from your host or from Google Search Console.
If you see any of these, contact your host or web developer straight away and restore from a clean backup.
Every website we build includes secure hosting setup, https and sensible security settings. See our website design service.