While much of the focus in WordPress security is on website hardening measures, the reality is that users often represent the weakest link in the chain. In this session, I demonstrate how a small selection of free WordPress plugins and complementary tools can be used to implement practical, user-focused security measures. Attendees will learn how to support their users in adopting secure practices, ultimately helping to protect both user accounts and the wider website environment.