You wouldn’t leave your doors unlocked if you were the last one to leave the house, would you?

Would you give a stranger the password to your online banking account?

Would you share or give a stranger the password to your blog?

Protecting your blog is just as important as protecting your home and online bank accounts, yet many bloggers share personal details about themselves on their blogs and on social media, which can be a treasure trove for scammers. Be careful what information you share.

Before sharing any information, ask yourself, ‘Would I share this information with a complete stranger?’

Light blue image with the words 'Is Your Blog Safe? One Security Feature You Must Have' in white text.
Adding this feature will give your blog an extra layer of security.

Although we’re all encouraged to use a strong password to protect our blogs, did you know that many blogging platforms, including WordPress, offer users an extra layer of security when it comes to protecting their blogs?

Two-factor authentication adds an extra layer of security by requiring you to enter a code or use another device in addition to your password. For example, you can use an app like Microsoft Authenticator or Google Authenticator to generate access codes for your blog.

WordPress offers users two-factor authentication security. Follow the guide below to set it up for your WordPress blog. For this example, I’m using an Apple iMac desktop computer.

How to set up two-step authentication for your WordPress blog.

  • In the top right of your blog, click on your profile picture/avatar.
  • Click on ‘Security‘ in the menu on the page’s left side.
Image highlighting the 'Security' tab on a WordPress blog.
Click on the ‘Security’ tab.
  • Select the ‘Two-step Authentication‘ option.
Image highlight the Two-Step Authentication tab on a WordPress blog.
Select Two-Step Authentication
  • Select which method you would like to receive the two-step passcode generated by WordPress, and click the ‘Get Started‘ button.
Image highlighting the 'Get Started' button when setting up Two-Step Authentication on WordPress.
Click the ‘Get Started’ button.
  • Follow the onscreen instructions depending on your selected method to receive the WordPress two-step authentication passcode.
  • Once enabled, logging into WordPress.com will require you to enter a unique passcode generated by an app on your mobile device or sent via text after adding your username and password.
  • You will receive an email from WordPress confirming that two-step authentication has been enabled.
Image showing an email confirmation from WordPress confirming that two-step authentication has been set up.
You’ll get an email from WordPress confirming that two-step authentication has been set up for your blog.
  • That’s it! Access to your blog is now protected by an extra layer of security.

I’d recommend adding or checking that the recovery email address and recovery SMS number for your WordPress blog/account are also correct when switching on two-step authentication.

Are you making the most of Two-Step Authentication to safeguard your blog? Need guidance on setting it up? Share your best practices for securing your blog in the comments below.

Did you miss my post giving details of what plans I have for my blog in 2024? Check out my post, ‘2024: Exciting And Positive Things Happening On Hugh’s Views And News‘, for complete details.

Follow Hugh on social media. Click the buttons below.

Layout, content, settings, and format might differ on self-hosted blogs.

Copyright @ 2024 hughsviewsandnews.com – All rights reserved.


Discover more from Hugh’s Views & News  

Subscribe to get the latest posts sent to your email.

63 responses to “Is Your Blog Safe? One Security Feature You Must Have”

  1. Are You Getting 'Anonymous' Blog Comments? How To Stop Them avatar

    […] Is Your Blog Safe? One Security Feature You Must Have […]

  2. Inspire Me Monday Linky Party #452 | Mostly Blogging avatar

    […] Is Your Blog Safe? One Security Feature You Must Have […]

  3. Janice Wald avatar

    Congratulations! You won the Inspire Me Monday Linky Party and will be featured on my site tomorrow.
    Janice

    1. Hugh W. Roberts avatar

      Thanks for the fantastic news, Janice.

  4. EsmeSalon avatar
    EsmeSalon

    Hi Hugh, Great and very useful tip as always.
    Thanks so much for participating and sharing at SSPS 293. See you again next week!

    1. Hugh W. Roberts avatar

      I’m glad this post has been so helpful. Thanks Esme.

  5. dgkaye avatar

    Thanks for another great tip Hugh. I’d like to know if by adding the two-step, does that mean we have to do two logins to open our dashboards? :)

    1. Hugh W. Roberts avatar

      It depends, Debby. I went the SMS direction. After logging in, I now get a link sent to my phone (and Apple Watch). All I have to do is click on the link, and my blog then opens on my desktop. So no having to enter any passcodes.

      1. dgkaye avatar

        Thanks Hugh. I’m not a Mac user so it may be a tad different.

        1. Hugh W. Roberts avatar

          Yes, you’re right. Also, if you go or the app option, you’ll be sent a number code (usually 6 figures long) to open up your blog. I used to do that using an authentication app until I discovered I could open my blog (and computer) from my watch.

          1. dgkaye avatar

            Thanks again Hugh. :)

  6. Liesbet @ Roaming About avatar

    Thanks for the tip, Hugh. I’ll have to figure out how to activate the two-step authentication function on my self-hosted blog, as my avatar on the right top corner in my dashboard doesn’t give me a “security” option.

    1. Hugh W. Roberts avatar

      I hope you find where the security option is, Liesbet. Two-step authentication certainly helps give me a little more piece of mind.

  7. Eugi avatar

    Thank you, Hugh, for this excellent advice. We must be vigilant about being safe online and not have the attitude, that it will never happen to us.

    1. Hugh W. Roberts avatar

      I completely agree, Eugi. It always annoys me when people say ‘ it’ll never happen to me.’

      1. Eugi avatar

        Me too, Hugh, and words they will regret.

  8. Terri Webster Schrandt avatar

    Great advice, Hugh! I see the prompt for it occasionally and really should take this step, given that my blog FB page was hacked in 2022. Thanks for the reminder!

    1. Hugh W. Roberts avatar

      That’s a good enough reason to set it up, Terri. I think I set two-step authentication for my blog up many years ago when my Facebook account was also hacked. That’s one social media site I do not miss.

  9. James L avatar

    Thanks Hugh for spreading the word about 2 Factor Authentication, I can see a lot of people commenting on the post saying they’re setting up which is good to see, as this extra security key will go a long way to protecting identify.

    I used 2 factor on as many accounts that allow it, and it does work as an extra failsafe if you tend to use the same password on different sites, and one of those places suffer a data breach. People will malicious intentions will then try that password on any other accounts they know you own (which is easier than ever due to sharing on social media.

    It might be annoying having that extra step to authentic – I once accidently left my phone in the car, so couldn’t get on a site I regularly because of 2FA being enabled, but it shows how effective it works if your password falls into the wrong hands!

    Also hope you don’t mind me sharing this link (please edit out if not), but your readers checking through the comments might be interested in the website https://haveibeenpwned.com/ which reveals which sites have had user details leaked, you just put in the web domains where you have accounts, it tells you if a site has been hacked (and when), you can then update your passwords for the site, and all other sites you use which share the same password!

    1. Hugh W. Roberts avatar

      Thanks for the information, James. I use Chrome and it has a similar feature that tells me which sites have had a data breach. My Apple devices also tell me of any ‘insecure passwords’ including weak passwords.

      I know that changing passwords can be a hassle, but I tend to change mine at least once a year and do not use the same ones. I also use a password manager which helps when I forget passwords (it happens).

      Your story about leaving your phone in the car and not being able to access a site is prove indeed on why everybody should consider two-step authentication. Yes, it can be a pain, but that extra layer of security works.

      1. James L avatar

        In an old IT job we had people complain about the enforcement of two factor authentication, but those who let their company email account fall into the wrong hands, had bruised egos and were more compromising!

  10. JT Twissel avatar

    For some reason it’s already set up on my blog – I don’t recall doing anything! But it’s nice to know how to reset it should anything happen. Thx!

    1. Hugh W. Roberts avatar

      You may have set it up many years ago as it’s been available to do for sometime. But good to know it’s all set up and working.

Feel free to leave a comment. Engagement helps keep blogs alive and forms community.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

I’m Hugh

Welcome to my blog. I’m delighted to have you here. This is the place to discover tips on blogging and WordPress, flash fiction, photography, and more. I enjoy engaging with my readers, so please feel free to explore, join discussions, and contact me. I’m happy to assist! Find out more about me and my blog by clicking the ‘Meet Hugh’ button.

Let’s connect

Subscribe to Hugh’s Views And News

Latest Posts

Looking for your next quick read? Try my books

An image of book covers, book, tablet and mobile phone, for the book Glimpses.
An image for the book More Glimpses - showing a book cover, tablet and mobile phone.

Follow Hugh in the Fediverse

Hugh's Views & News  
Hugh's Views & News  
@hughsviewsandnews.com@hughsviewsandnews.com

WordPress & Blogging tips, flash fiction, photography and lots more!

315 posts
10 followers
A widget with the words 'Team Effort - Story Chat Digest - Where Authors Meet - Author'

Most Viewed Posts & Pages Over The Last 24 Hours

Recommend Blogs To Follow


Roaming About
A Life Less Ordinary

Second Wind Leisure Perspectives
Second Wind Leisure Perspectives
Fun, Photography & Friends

Spo-Reflections
Spo-Reflections
To live is to battle with trolls in the vaults of heart and brain. To write; this is to sit in judgment over one's Self. Henrik Ibsen

Boomer Eco Crusader
Boomer Eco Crusader
Live Green | Declutter | Simplify Life

SONGS AND SCRIPTS AND DUNKING BISCUITS
Every day tales of a winging-it creative

Jacqueline Lambert
Jacqueline Lambert
Award-Winning Travel Humour Writer

Anne R. Allen’s Blog… with Ruth Harris
Writing about writing. Mostly.

Fancying France
The musings of a ‘femme d’un certain âge’ who divides her time between SW France and SE England

Marsha Ingrao         Always Write
Marsha Ingrao Always Write
Having fun blogging with friends

Curiosities, Castles and Coffee Shops
Curiosities, Castles and Coffee Shops
The musings of a curious mind

WrookieSchU
WrookieSchU
Live life 🙌🏼

WPcomMaven
WPcomMaven
Helping you make the most of your free WordPress.com website since 2011

Share Your Light
Share Your Light
You are a miracle – Let it happen

No Facilities
No Facilities
Random thoughts, life lessons, hopes and dreams

Esther Chilton
Writer, Tutor and Editor

Saying nothing in particular
Saying nothing in particular
Jan … JT Twissel

The Chicago Files
The Chicago Files
A Canadian Perspective on Living in the Windy City!

Thank you to all my visitors

489,661 hits

268,752 visitors

Scan the QR code to follow me on Bluesky

Copyright Protected Blog

COPYRIGHT ©2011-2031 Hugh’s Views And News BLOG – All Rights Reserved.

This work by Hugh W. Roberts, and/or Hugh’s Views And News blog, is licensed under a Creative Commons Attribution-Noncommercial-NoDerivatives 4.0 International License. Unauthorised use and/or duplication of this material (text and images) without express and written permission from this blog’s author and/or owner is strictly prohibited. If you want to use posts, excerpts, photos and links, you may contact me first. You must give full and clear credit to Hugh W. Roberts and Hugh’s Views And News dot com with links to the original content.