Unfortunately WordPress has reputation of weak security and the web is full of guides and plugins to enhance WordPress security. Unfortunately some advice is misleading or just false sales pitch. Understanding what is truly essential for security and what is irrelevant can be difficult. In this talk I explain, based on my experience of maintaining hundreds of WordPress sites, what I don’t consider relevant and what you don’t need to worry about, and what are the actually important things you need to care for.