Andrew Ssanya

WordPress Dev | Digital Skills Facilitator

​

@X: SAndrewug

@LinkedIn: andrewssanya

P3

Permissions

Who can do what

P1

Passwords

Your first line of defence

​

P3

Plugins

Power — and risk

86%

of breaches involve

weak or stolen passwords

56%

of hacked WP sites ​ had​ vulnerable plugins

34%

of compromised sites had

excessive permissions

❌  Weak Password Examples

🚫 admin / password123

🚫 yourname + birthday

🚫 sitename2026

🚫 qwerty / 123456

✅ Strong Password Examples

✔ T!ger$MaK3_82#run

✔ Masaka@2026!WordCamp

✔ 7Blue$Hippo!Runs

✔ Use a password manager

✅ 12+ characters minimum — longer is always better

✅ Enable 2FA with the WP 2FA plugin (free)

✅ Change default 'admin' username immediately

✅ Use Bitwarden to manage passwords

Last Updated

✅ Within 6 months

❌ Over 1 year ago

Active Installs

✅ 10,000+ installs

❌ Under 100 installs

Rating

✅ 4+ stars, many reviews

❌ Few reviews, low rating

WP Compatible

✅ Tested with your WP version

❌ Untested / incompatible

🗑️ Delete plugins you don't use — deactivated ≠ safe

🔄 Update plugins every week — not just when you remember

🔍 Scan with Wordfence after any new install

Administrator

Everything — install, delete, manage

Editor

Publish & manage all posts/pages

Author

Publish & manage own posts only

Subscriber

Read only — no editing at all

Update everything this week —  WordPress core, every plugin, every theme (then set a weekly reminder).

Check who has access —  Review Users → All Users. Remove anyone who shouldn't be there.

Audit your passwords —  Change weak ones, enable 2FA, install a password manager.

​