Don’t Give Your Admin User Name Away

During the last month, my personal website had 67,068 brute force attacks blocked. A brute force attack is when some hacker is making guesses at your username and password so they can bet access to your site. This is one of the reasons why WordPress tells you NOT to use the default “Admin” for your username. That makes one less thing for the hacker to figure out.

But out of the box, WordPress has the REST API enabled and, unless you turn if off, hackers can easily request a list of user ids from your WordPress site, revealing the Admin user name. How do you tell if your WordPress installation is opening revealing the admin account?

Append “/wp-json/wp/v2/users” to your website address.

IE: www.yoursite.com/wp-json/wp/v2/users.

For example, if a hacker tries going to www.davidriewe.com/wp-json/wp/v2/users they will get

{“code”:”rest_cannot_access”,”message”:”DRA: Only authenticated users can access the REST API.”,”data”:{“status”:401}}

Which is ok, non authenticated users do not need to access the rest API on my website. They shouldn’t be allowed access on your site either.

Blocking REST API

This can be done with a plugin. I used “Disable REST API” by Dave McHale

Picture of David Riewe

David Riewe

Hey, I鈥檓 David Riewe. In the vast digital world, I specialize in harnessing the power of AI and crafting precision-driven funnels to amplify your online presence. My mission? To help entrepreneurs and business owners navigate the complex landscape of digital marketing with ease. Ready to transform your online strategy with AI and funnels? Let鈥檚 get started. 馃殌

Leave a Reply

Your email address will not be published. Required fields are marked *

Recent Posts

Sponsors

Unlock the potential of AI for your business! Click here to explore how 'AI Chatbots' can revolutionize your customer interactions.
Master digital earnings with Online Profit Secrets鈥攗nlock marketing strategies, funnel tips, and ad hacks!
AI Secrets for Digital Marketers
FREE Course: Learn How To Create 30 Pieces Of Content in 10 Minutes With A.I.
Ready to transform your business in under 5 minutes? Join us in this FREE video as one of the world's leading funnel builders reveals the secrets to rapid, powerful funnel creation.