Must Have Security Plugins for Wordpress

A lot of people use wordpress when making blogs because it is one of the most seo-friendly Content Management System (CMS). Because it’s famous, a lot of people (hackers) are also trying to hack it so we need to add more security to our wordpress blogs. Here i collected some of the best security plugins for wordpress that will help protect your blogs from these said people. Below is the list:

• AskApache Password Protect
  This plugin doesn’t control WordPress or mess with your database, instead it utilizes fast, tried-and-true built-in Security features to add multiple layers of security to your blog. This plugin is specifically designed and regularly updated specifically to stop automated and unskilled attackers attempts to exploit vulnerabilities on your blog resulting in a hacked site.
  
  You can set up Password Protection for your blog using HTTP Basic Authentication, or you can choose to use the more secure HTTP Digest Authentication.
  
  The power of this plugin is that it creates a virtual wall around your blog allowing it to stop attacks before they even reach your blog to deliver a malicious payload. In addition this plugin also has the capability to block spam with a resounding slap, saving CPU, Memory, and Database resources. Choose a username and password to protect your entire /wp-admin/ folder and login page. Forbid common exploits and attack patterns with ModSecurity, ModRewrite, Mod_Alias and Apache’s tried-and-true Core Security features. This plugin requires the worlds #1 web server, Apache, and web host support for .htaccess files.
• WP-DB-Backup
  WP-DB-Backup allows you easily to backup your core WordPress database tables. You may also backup other tables in the same database.
• Akismet
  Akismet checks your comments against the Akismet web service to see if they look like spam or not and lets you review the spam it catches under your blog’s “Comments” admin screen.
• WP Security Scan
  Scans your WordPress installation for security vulnerabilities and suggests corrective actions.
  
  -passwords
  -file permissions
  -database security
  -version hiding
  -WordPress admin protection/security
  -removes WP Generator META tag from core code
• Admin SSL
  Admin SSL secures login page, admin area, posts, pages - whatever you want - using Private or Shared SSL.
  
  Features:
  1. Forces SSL on all pages where passwords can be entered.
  2. Works with both Private and Shared SSL.
  3. Can be installed on WordPress MU to force SSL across all blogs (only works if you have a Private SSL certificate installed) from WPMU 1.3 upwards.
  4. Custom additional URLS (e.g. wp-admin/) can be secured through the config page.
  5. You can choose where you want the Admin SSL config page to appear!
• Wordpress Automatic upgrade
  Wordpress Automatic Upgrade allows a user to automatically upgrade the wordpress installation to the latest one provided by wordpress.org using the 5 steps provided in the wordpress upgrade instructions.
• Secure Files
  This plugin allows you to upload and download files from outside of your web document root for security purposes. It can be used to can restrict file downloads to users that are logged in, or have a certain user level. [Manage -> Secure Files]