Knowledgebase

There has recently been an increase in hacking attempts across global WordPress sites. Specifically, hackers are attempting to "brute force" their way into any WordPress site admin backend by using a script or "bot".

This robot script scours the internet to find any installation of WordPress and then uses a the bot to try to guess the username and password. They usually try many commonly-used passwords to gain entry (which is why it's always important to use strong passwords). Even if the robot cannot break in, these attacks degrade server performance as the bot continually re-loads the login page to repeat its login attempt.

As a result, we are implementing a second "Authorization Login" on top of the WordPress installation. When you try to access the login page, you will now be presented with a pop-up "Authentication Required". You will need to enter the username and password that has been sent to you (if you can't find this information on your email, or you can't remember it - please open a support ticket).  Once you've entered the authorisation username and password, you should then be able to access the normal WordPress login screen, where you can login as usual with your WordPress details.

Authorization Login Username: *********
Authorization Login Password: *********

Most browsers will allow you to "remember" these login credentials, so hopefully this will not be too much of an inconvenience for you, but it will be for the hackers!

Thanks for your understanding. If you would like further information on securing your website, or if you have any questions, comments or concerns about the above, just open a support ticket.