MalCare Security Service: One-Stop WordPress Security Solution

MalCare is a complete security solution for WordPress sites and non-techie WP users. With the Malcare plugin installed, you can keep your WordPress site secure and protected with just a few clicks.

MalCare Security Service: One-Stop WordPress Security Solution

MalCare Security Service: One-Stop WordPress Security SolutionWordPress is the world’s leading  platform for building websites and for publishing and managing content online. Over 30% of all websites in the world are powered by WordPress, making the platform a huge target for hackers and malicious users looking for vulnerabilities that they can exploit and use to compromise a website.

According to security experts, 90,978 hack attempts are made on WordPress websites every minute!

Our own security reports and logs confirm this. We run a number of WordPress sites and these are constantly under attack …

WordPress sites are constantly under attack!

(WordPress sites are constantly under attack!)

If you have created a website without proper security planning and the right WordPress security plugins installed, then it’s only a matter of time before you fall prey to hack attempts.

Find Out If Your Website Has Been Hacked

(For more details, visit BlogVault. Source: Slideshare)

If you suspect that your website has been hacked, then check out this tutorial:

How To Prevent Your Website From Being Hacked

To prevent your WordPress website from being hacked, you should have a web security plan in place and choose security plugins that you can trust and that are well-supported.

MalCare

MalCare: One-Stop WordPress Security Solution

(MalCare: One-Stop WordPress Security Solution)

MalCare is regarded by many WordPress security experts and top WordPress plugin listicles as one of the best security solutions in the market.

MalCare is one of the best security solutions for WordPress!

(MalCare is one of the best security solutions for WordPress!)

What’s MalCare?

MalCare dashboard

(MalCare dashboard)

MalCare was built by the same company that developed BlogVault, a popular WordPress backup plugin with over 200,000 users. While working on BlogVault, they saw the need for a good security plugin and decided to build a comprehensive security solution that can detect, remove, and prevent hacking attempts.

What makes MalCare a better WordPress security plugin? First of all, this is a multidimensional solution created for non-technical users that allows you to keep your WordPress site secure with just a few clicks.

In this post, we are going to cover the following areas of using MalCare:

  • Installation and Setup
  • MalCare Dashboard
  • MalCare Scanner
  • MalCare Cleaner
  • MalCare Firewall
  • Website Hardening
  • Website Management
  • Secure Backups
  • MalCare Support

Installing MalCare

Installing and setting up MalCare requires no external help or technical assistance from experts.

Setting up MalCare and ensuring that your security plugin is running and keeping your site protected is a simple two-step process:

Step 1 – Add Your Site

First, sign up to  create an account, then log in.

After logging into the MalCare dashboard, add your site(s) to the MalCare dashboard by selecting the Add New Site button …

Add new site

(Add new site)

A field will display asking for the address of your website. Enter the URL of your site into the field and select the Next Step button …

Add a site

(Add a site)

Step 2 – Install The Plugin

You will be asked to enter your site’s admin login details. Type in the credentials to your site and MalCare will do the rest for you and begin securing your site.

Exploring The Dashboard

The MalCare dashboard provides a clean and intuitive interface that makes it easy to navigate to the various plugin sections and features.

The left-hand side of the dashboard provides one-click navigation links to help you access all the main features quickly.  The dashboard is neatly divided into five sections: Security, Management, Backup, Reporting, and White-Labelling. Below this, you will find everything you need to keep your site secure.

After performing an initial scan, your site will be marked with a security rating ranging from A to D (A is best and D is worst). The score is determined by an internal algorithm that tells you the health of your site.

Don’t be alarmed if your scan doesn’t result in an “A”. MalCare will tell you what you can do to improve the score.

There are four main features available in MalCare that you need to know about. Let’s take a deeper look at each of these features:

The Scanner

An impressive fact worth knowing is that MalCare was built after collecting data from over 240,000 websites. The scanner uses artificial intelligence to detect hard-to-find malware. MalCare scans sites at a scheduled time every day.

MalCare scanner

(MalCare scanner)

Apart from the scheduled scans, there is also a Scan Now option that lets you instantly run a scan and display the results.

Select the Scan Site option

(Select the ‘Scan Site’ option)

Scanning Technique

MalCare doesn’t just search for strings in the code to find malware. This technique is not sufficient to detect complex malware. It has a sophisticated algorithm along with AI that learns and discovers new and complex malware in your system with ease.

Reduces Load

Another reason why MalCare is impressive is that the scanning does not slow down your site. Instead, MalCare transfers your website data to its own server and runs the scan on the server.

After the scanning is done, if malware is found, the next step is to clean it.

The Cleaner

Cleaning malware is normally a time-consuming task. MalCare, however, makes this easy. The Auto Clean option is present in the Scanner section and the malware clean happens at the click of a button.

MalCare cleaner

(MalCare cleaner)

 If you are informed that your site has been hacked, all you need to do is press the button, and your website will be malware free! You will be informed of this by email and receive a notification alert on the dashboard.

No Technical Expertise Required

You don’t need technical experts to use the MalCare Cleaner. The entire cleaning process is simple and easy to follow and can be done by a non-technical person.

Thorough Malware Removal

The nature of malware programs is that even after being removed, many will try to make a comeback by finding a backdoor. MalCare was built to prevent these kinds of issues. After running the cleaner, most malware issues should be permanently resolved.

Precision

The MalCare cleaner works in a way that does not affect any part of your site while removing malware. It takes care of the files that were hacked and leaves your clean files untouched.

Many people will recommend performing a manual clean up after your site has been hacked. This kind of cleanup, however, is considered outdated. MalCare employs the latest technologies to clean a site with the click of a button!

Your site is now clean!

(Your site is now clean!)

While removing existing malware is essential, the next important step is preventing malware from infiltrating your website again.

Website Hardening

WordPress recommends certain website hardening measures to improve website security. To perform those measures, however, requires some technical knowledge. MalCare makes it easy to perform these measures. Based on the level of security required, MalCare offers three types of protection.

MalCare website hardening

(MalCare website hardening)

1. Essentials
  • Block PHP Execution in Untrusted Folders
  • Change Database Prefix
  • Disable Files Editor
2. Advanced
  • Block Plugin/Theme Installation
3. Paranoid
  • Reset all Passwords
  • Change Security Keys

MalCare performs these actions when the above security levels are enabled. Here are a few technical aspects of the website hardening feature.

Security Keys

These are stored by default on the database of the site. However, it can be dangerous as it is an easy target for hackers. With MalCare, these keys can be replaced with a new set of keys that are stronger. They are also placed in a more secure location.

PHP files

Attacks caused due to the execution of PHP files in the uploads folder are frequent, but MalCare efficiently takes care of this too!

Prevents Plugin Installations

Rogue plugins and themes are an easy way for hackers to get into your site. MalCare detects them at the initial scan itself. It will disable these installations and reduce the risk factor.

You can select your preferred security level and choose the actions to take when you navigate to the website hardening feature. The hardening feature is highly recommended even if you have not experienced hacking issues.

MalCare Firewall

MalCare Firewall is a feature enabled to fortify your website and protect it from hackers. This feature is automatically activated when a site is added to MalCare.

MalCare firewall

(MalCare firewall)

However, you can disable if you wish. MalCare filters the traffic coming from the outside world in two ways:

IP Blocking

MalCare scans more than 100,000 websites in search for bad IPs. These are the ones that are known to harm your website when they visit it. So whenever one of these IP addresses try to gain access from your site, the firewall blocks it!

MalCare traffic log

(MalCare traffic log)

Login Protection

Some hackers continuously try to gain access to your site by trying different combinations of passwords. MalCare blocks them after a few unsuccessful attempts by deploying a CAPTCHA.

This feature will make you feel a lot safer, so ensure that the firewall remains enabled all the time.

MalCare login logs

(MalCare login logs)

Integrated Backup

Backups are an essential part of website security. They are your safety net if a hacker gains access to your site and wipes out your files and data. With MalCare’s powerful backup service, your sites will remain protected and you always have access to your backups.

Website Management

MalCare has a website Management section where you can manage your dashboard, update plugins, themes, and a lot more. The site also has a feature that alerts you if your plugins are outdated!

Additionally, you can change passwords, user roles or even delete users who have access to your WordPress site.

MalCare website management

(MalCare website management)

MalCare Support

If you need support or have any questions or concerns about the features or the technology behind MalCare, you will find that the MalCare support team is very responsive and eager to share their knowledge with you.

Recommendation: Install The MalCare Plugin

The features in MalCare are simple and easy-to-use. If you own or manage multiple WordPress sites, adding these to the dashboard is just a simple ‘rinse and repeat’ process. MalCare is a robust WordPress security solution backed by a solid support team and extensive help documentation.

With MalCare’s Scanner actively looking after your WordPress sites on a daily basis, you will have peace of mind knowing that your sites will be safer.

Using the Cleaner is easy and the procedure takes only a few minutes. Use the Website Hardening feature to lock down the backend of your site(s). Malcare also provides two additional useful features for agencies, web developers, or anyone managing client websites: White-Labelling and Client Reporting.

MalCare is very reasonably priced and offers a range of options to suit your needs, depending on how many sites you need to protect and manage.

If you are a WordPress site owner, we recommend installing the MalCare security plugin and using the service as part of your regular website management and security maintenance process.

For more details, go here: MalCare – Complete WordPress Security Solution

How To Fix Can’t Change WordPress Website Address – Greyed Out URLs

Are your WordPress Address (URL) and WordPress Site Address (URL) greyed out? This step-by-step tutorial shows you how to fix this issue.

How To Fix Can't Change WordPress Website Address - Greyed Out URLsThis tutorial is part of our FREE WordPress Management training and WordPress Troubleshooting tutorial series.

In this series of step-by-step tutorials, we show you how to troubleshoot and fix common WordPress errors.

If you plan to move your WordPress installation to another directory or change your website from ‘http’ to ‘https’, you will need to edit the URLs in your Settings > General Settings section.

If these fields are greyed out, however, the fields will be uneditable  …

WordPress General Settings - Greyed out URLs

(WordPress General Settings – Greyed out URLs)

If you find that your WordPress Address (URL) and Site Address (URL) are greyed out on your Settings > General Settings section, the step-by-step tutorial below will show you how to easily fix this issue.

For help configuring your General Settings section, see this tutorial:

Important Info

Important: Always do a backup of your WordPress site (files and database) before modifying any files or performing any upgrades or installations! 

If you don’t want to do site backups, then consider getting support from a WordPress professional, or use a backup plugin.

How To Fix Can’t Change WordPress Website Address – Greyed Out URLs

Greyed out WordPress Address and Site Address URLs can be caused when someone moves or clones a WordPress site but forgets to delete a couple of lines of code or the migration process is interrupted, making the fields uneditable in the General Settings section …

WordPress General Settings - Greyed out URLs

(WordPress General Settings – Greyed out URLs)

To fix this issue, you will need to edit the wp-config.php file in your WordPress installation, either using FTP software, or File Manager in cPanel.

For this tutorial, we’ll use File Manager in cPanel.

How To Edit wp-config.php File Using cPanel File Manager

If your WordPress site is hosted on a server with cPanel installed, log into your cPanel control area and click on File Manager (Files > File Manager) …

cPanel Files - File Manager

(cPanel Files – File Manager)

Most WordPress installations are found inside the ‘public_html’ directory. Double-click on ‘public_html’ to open the directory folder …

cPanel File Manager - public_html directory

(cPanel File Manager – public_html directory)

Locate and select the wp-config.php file …

wp-config.php file

(wp-config.php file)

With wp-config.php selected, click on Edit to open the file (note: we recommend making a backup of the file before editing. To do this, select ‘Download’ first and save a copy of the file to your hard drive) …

File Manager - Edit function

(File Manager – Edit function)

A warning dialog window may pop up reminding you to back up the original file. Click on ‘Edit’ to proceed …

Edit dialog window

(Edit dialog window)

Scroll down through the code in this file until you find the two lines shown below (define ‘WP HOME’ and define ‘WP SITEURL’). The ‘yourdomain.com’ URLs should display your actual domain …

Find these two lines in wp-config.php

(Find these two lines in wp-config.php)

Select only these two lines inside the wp-config.php file, nothing else …

Select define 'WP HOME' and define 'WP SITEURL'

(Select define ‘WP HOME’ and define ‘WP SITEURL’)

Delete only these two lines, nothing else …

Delete define 'WP HOME' and define 'WP SITEURL'

(Delete define ‘WP HOME’ and define ‘WP SITEURL’)

After deleting these two lines of code, the section of your wp-config.php file should look like the screenshot below …

wp-config.php file with define 'WP HOME' and define 'WP SITEURL' lines removed

(wp-config.php file with define ‘WP HOME’ and define ‘WP SITEURL’ lines removed)

Click the ‘Save Changes’ button to save and update your wp-config.php file and then click ‘Close’ to exit the editing window in File Manager …

Save changes in your wp-config.php file

(Save changes in your wp-config.php file)

Log out of cPanel and log into your WordPress site’s admin area, then click on Settings > General in the main menu. The WordPress Address (URL) and Site Address (URL) fields should no longer be greyed out, but restored to normal and editable once again …

WordPress Address (URL) and Site Address (URL) fields are no longer greyed out

(WordPress Address (URL) and Site Address (URL) fields are no longer greyed out)

Important

The above should fix this issue in most instances. If you are still experiencing issues with greyed out URLs, contact your website developer or hosting provider for help.

Congratulations! Now you know how to fix the issue of greyed out URLs preventing you from changing your WordPress site address URLs in the General Settings section.

How To Fix Can't Change WordPress Website Address - Greyed Out URLs

More WordPress Troubleshooting Tutorials

If you experience additional issues with WordPress, please refer to the tutorials in the section below:

***

"I have used the tutorials to teach all of my clients and it has probably never been so easy for everyone to learn WordPress ... Now I don't need to buy all these very expensive video courses that often don't deliver what they promise." - Stefan Wendt, Internet Marketing Success Group

***

How To Fix Problems Accessing Your WordPress Admin Area

Are you locked out of your WordPress admin area? Learn how to troubleshoot, identify & fix problems or errors preventing access to your WordPress admin area …

How To Fix Problems Accessing Your WordPress Admin AreaThis tutorial is part of our FREE WordPress Management training and WordPress Troubleshooting tutorial series.

In this series of step-by-step tutorials, we show you how to troubleshoot and fix common WordPress errors.

Note

Important: Always do a backup of your WordPress site (files and database) before modifying any files or performing any upgrades or installations! 

If you don’t want to back up your site yourself, then consider getting professional WordPress assistance, or use WordPress backup plugins.

How To Fix Problems Accessing Your WordPress Admin Area

Can't access your WordPress admin area?

(Can’t access your WordPress admin area?)

If you use WordPress often, you may find yourself at times locked out of your administration panel.

Some of the possible causes of finding yourself locked out of your WordPress admin area include experiencing issues or errors with:

  • WordPress password
  • WordPress themes or plugins
  • WordPress installation files
  • WordPress database
  • WordPress security
  • Your server or web host

In this tutorial, we’ll use a systematic approach to troubleshoot, identify, and hopefully fix the issue or error preventing you from accessing your WordPress admin area.

Info

Normally, most people experiencing issues with WordPress would just contact their website developer or web hosting provider for help.

Use the tutorials below if you manage your own WordPress site or if you want to learn how to troubleshoot and fix problems yourself (remember to always backup your site and data).

WordPress Password & Login Issues

Can you access your WordPress admin login page? If you can, then the first step to troubleshooting problems preventing you from accessing your WordPress admin area is to see if there are any issues with your password or login details.

You will be locked out of your WordPress admin area if you have forgotten your password and you cannot access the email for recovering your password, or if a user with administrative privileges has revoked your user access privileges or changed your login details.

If you think the issue may be related to your password or login details, then see the tutorials below:

Important

Most of the errors or issues described in the sections below may prevent you from accessing your WordPress admin login page. If, after going through the sections below you still cannot log into your admin area, then go here:

WordPress Theme Or Plugin Issues

Conflicts with WordPress plugins or themes can cause a number of issues that will prevent you from being able to access your WordPress admin area. Additionally, a plugin or plugin code can change settings that will lock you out of your WordPress admin pages.

To troubleshoot issues related to WordPress themes and plugins, refer to the tutorials below:

If the problem preventing you from being able to access your WordPress admin area is not being caused by WordPress themes or plugins, then the next step is to see if there are any issues with your WordPress installation files.

WordPress Installation File Issues

Were you trying to upload or install something before experiencing the problem? Corrupted files and installation errors can cause issues and prevent you from logging into your WordPress admin area.

To troubleshoot errors related to WordPress installation files, see these tutorials:

If the problem preventing you from being able to access your WordPress admin area is not being caused by WordPress installation files, the next step is to see if there are any issues with your WordPress database.

WordPress Database Issues

Over time, tables in your WordPress database can become corrupted and  lead to issues preventing you from accessing your WordPress admin area.

Some common problems involving WordPress database errors include the following:

The WordPress White Screen Of Death

WordPress White Screen Of Death

(WordPress White Screen Of Death)

If your screen is completely blank, you may be experiencing the dreaded WordPress “White Screen Of Death.”

To learn how to troubleshoot and fix this problem, go here:

Error Establishing A Database Connection

Error establishing a database connection

(Error establishing a database connection)

There are many reasons why WordPress can display an “Error establishing a database connection” message on your screen.

To learn how to troubleshoot and fix this error, refer to the tutorial below:

WordPress Fatal Errors

WordPress Fatal error message

(WordPress Fatal error message)

If your WordPress site is displaying a ‘Fatal error’ message, the issue may be caused by conflicting plugins or memory issues.

To learn how to troubleshoot and fix this problem, see this tutorial:

Memory Size Exhausted Errors

Fatal error: Allowed memory size exhausted

(Fatal error: Allowed memory size exhausted)

When the amount of memory allocated to your WordPress site isn’t enough to perform tasks required by a feature or plugin that you have installed, errors occur that can prevent you from being able to access your admin area.

To learn how to troubleshoot and fix issues related to memory size, go here:

If the problem preventing you from being able to access your WordPress admin area is not being caused by issues with your WordPress database, the next step is to see if there are any security issues with your WordPress site.

WordPress Security Issues

The worst case scenario for not being able to log into your WordPress admin area is that your site has been hacked or attacked by a malicious user.

If a hacker gains control of your administration area, they can lock you out and wreak havoc on your site

To troubleshoot issues related to WordPress security, see the tutorials below:

Also, see these resources for performing preventative security scans and protecting your WordPress site:

If there are no security issues preventing you from being able to access your WordPress admin area, the next step is to see if an issue with your server or web host is causing you login problems.

Server Or Web Host Issues

Is an issue with your server or web host causing you login problems?

(Is an issue with your server or web host causing you login problems?)

Sometimes, WordPress problems have nothing to do with WordPress or your site, but with your hosting environment.

If you have gone through all of the above sections and still cannot log into your admin area or you suspect an issue with your server is causing you login or access problems, then either contact your hosting provider or see the tutorials below:

Tip

If you continue to experience problems with your site, you may need to look at upgrading your hosting package or even switching web hosting providers.

Hopefully, one of the above tutorials has helped you resolve the problem. In addition to the information above, check out this video on what to do if get locked out of your WordPress admin area from the team at MyThemeShop:

(What to do if you get locked out of your WordPress admin area. Video: MyThemeShop)

More WordPress Troubleshooting Tutorials

If you experience any other errors with WordPress, please see the tutorials in the section below:

How To Fix Problems Accessing Your WordPress Admin Area

(Source: Pixabay)

***

"I am beyond impressed with what you have put together. I can tell that you put a ton of hard work into building what you have. You have the absolute best content on WordPress I have ever seen!" - Robert T. Jillie

***