This presentation focuses on how to employ “best security practices” for WordPress sites. It reviews current botnet and hacker schemes targeted at the WordPress platform, as well as current authentication models including one, two, multi-factor and password-less . It also reviews the top WordPress security plugins.