Home »

How to Secure Joomla 3 and Protect it Against Hacker Attacks

1. Keep Joomla and its extensions up-to-date

Probably the most important part of securing your Joomla website is to keep it updated to the latest version. In almost all version releases there are fixes for security issues. For more information on how to update Joomla to the latest version check out our Joomla Update Tutorial.

Keeping your Joomla extensions up-to-date is equally important for the security of your website. Actually, there are more attacks that utilize security issues in extensions than in the actual Joomla 3 core files. For more information on how to keep your Joomla components, modules and plugins up-to-date, please refer to our tutorial on How to Update Joomla Extensions.
2. Use Strong Login Details
First, you should avoid using default user names like "admin" or "administrator". Those will be first in the list of words a potential attacker would try. Next, it is important to have a strong password for your website. Many attackers try to brute-force your login details. This means that they use a list of commonly used passwords to guess yours. There are several tips that will help protect you against such attacks:    Don't use common words for passwords like love, god, pass, admin, admin123, etc.
  1.     Avoid personal information in passwords like your personal or family name.
  2.     Avoid password generators. Password generators use algorithms to generate the passwords which can be compromised by an attacker.
  3.     Use as many special characters ( *!@#)$ ), numbers and capital letters in your password as possible.
3. Use Proper File Permissions & Ownership
Another important part of having a secured Joomla 3 website is to set the right permissions for your Joomla files and folders. We recommend that you follow these suggestions for your permissions:
Tags: ,