The iThemes Security dashboard just got a new look.
With the latest version update of the iThemes Security plugin, all your WordPress security settings are now organized into boxes on one page so you can get a better view of all the ways you can secure and protect your site.
Settings Are Now More Organized
The old Settings page was long and overwhelming. Now, all your settings are organized into easy-to-scan boxes, so you can quickly enable them and configure individual settings.
You can also view your settings in list view by clicking the “list” icon.
Easy Settings Configuration
By clicking the Enable button, settings configuration options appear in a new modal window.
View Settings by All, Recommended & Advanced
New tabs located at the top of the page allow you to view smaller, more manageagble groups of settings.
- Click the Recommended tab to see the group of settings we recommend enabling to secure your WordPress site.
- Click the Advanced tab to see Advanced settings. These settings have been grouped into this tab because they can potentially cause compatibility conflicts or even break your site, so use them with caution.
- Click the All tab to see the entire list of settings.
Basic Configuration Instructions
Note: We recommend making a backup of your site before you begin activating or tweaking any security settings using a WordPress backup plugin like BackupBuddy. You can also use the Database Backups setting located in Recommended settings.
1. If you’re new to iThemes Security, begin by configuring each setting one by one, starting with the Recommended settings.
2. With each setting activation, check the functionality of your site and heed any warnings generated by the plugin.
By clicking the Advanced tab, you can see a list of all the Advanced security settings.
Note: These settings can potentially cause compatibility conflicts or even break your site, so use them with caution.
Pro settings are now indicated with a “Pro” callout.
- Malware Scan Scheduling – Protect your site with automated malware scans. When this feature is enabled, the site will be automatically scanned each day. If a problem is found, an email is sent to select users.
- Privilege Escalation – Allow administrators to temporarily grant extra access to a user of the site for a specified period of time.
- Password Expiration – Strengthen the passwords on the site with automated password expiration.
- reCAPTCHA – Protect your site from bots by verifying that the person submitting comments or logging in is indeed human.
- Settings Import and Export – Export your settings as a backup or to import on other sites for quicker setup.
- Two-Factor Authentication – Two-Factor Authentication greatly increases the security of your WordPress user account by requiring additional information beyond your username and password in order to log in.
- User Logging – Log user actions such as login, saving content and others.
New Dashboard FAQs
- Were any settings removed with this update?
- Nope. They’re just better organized. Not seeing a setting? Try sorting the settings options by clicking the All link.
- Are all of my previous settings now active in new iThemes Security dashboard? Do I need to update anything?
- All of your old settings have been migrated into the new iThemes Security dashboard when you update, so you don’t need to do anything.
- What happened to the “Temporarily Whitelist My IP” button?
- After successfully logging in as an admin, your IP will be automatically whitelisted. You can still manually whitelist your IP in Global Settings.
- Where can I find the Hide Backend/Hide Login feature in the new dashboard?
- The Hide Backend/Hide Login feature can now be found in Advanced Settings.
- Can I still make a database backup using iThemes Security?
- Yep, you can still make database backups with iThemes Security from the Database Backups setting in the Recommended settings. We recommend using BackupBuddy to complete your WordPress security strategy with complete backups of your WordPress site, including your media library, themes and plugins (iThemes Security can only handle database backups).