Overview of the theme, its contents, and how to get started with the theme
by Pixelwars
Thank you for purchasing our theme! If you have a question that this documentation doesn't answer, ask us on our support forums. If you like the theme, please rate it on ThemeForest.
- Pixelwars Team
Sign in to our support forums to ask your question. To open a new topic, you need your Item Purchase Code (where is my purchase code?).
If you like the theme, you can rate it on your ThemeForest Downloads page.
We assume you have basic knowledge of WordPress. In this documentation, you will learn how to install, set up and customize BookCard.
We've assembled some links to get you started:
Learn WordPress: Level up your WordPress skills.
- (Course) Beginner WordPress User
- (Video) How to Find Help with WordPress
- (Video) WordPress Dashboard Overview
- (Video) How to Install a Theme
- (Video) How to Choose and Install Plugins
- (Video) Using the Theme Customizer
- (Video) Using the Media Library
- (Video) Intro to Publishing with the Block Editor
- (Video) Intro to the Block Directory
- (Video) Using WordPress in Other Languages
WordPress Documentation: A variety of resources to help you get the most out of WordPress.
- Where to Start: Learn the basics of WordPress and take your first steps.
- Dashboard: Get to know the control center of your site.
- Administration Screens
- WordPress Block Editor - Blocks
- Pages Screen - Create Pages
- Posts Screen - Posts Categories Screen - Posts Tags Screen
- Comments Screen - Comments in WordPress - Comment Moderation - Avatars
- Media Library Screen - Media Add New Screen - Edit Media
- Settings General Screen
- Settings Writing Screen
- Settings Discussion Screen
- Settings Media Screen
- Settings Permalinks Screen
- Customization: Get the look and feel you want on your site.
- Maintenance: Keep your site updated, backed up, and ready.
WordPress Support Forums: Community-based Support Forums are a great place to learn, share, and troubleshoot.
- Fixing WordPress Forum: For any problems encountered after setting up WordPress.
- Requests and Feedback Forum: Suggest new features and share feedback about WordPress.
- Everything else WordPress Forum: For relevant questions and problems not covered in the other forums.
Note: The WordPress.org forums don't provide support for commercial themes. For questions about BookCard, please use our support forums.
Free Plugins: The WordPress Plugin Directory is the largest directory of free and open source WordPress plugins. Extend your WordPress experience with plugins.
You can add the theme to your WordPress site in one of the following ways.
The Envato Market plugin connects your site to your ThemeForest account and installs the themes you purchased.
The plugin also helps you keep the theme up to date (see the Update section).
Note: The "Theme/1 - Parent Theme" folder also has a "Previous Version" folder, with the ZIP file of the previous theme version. Don't install it on a new site. It is there for sites that already use the theme: if your site has a problem after an update, you can go back to the previous version by installing this file (see the Update section).
Note: Your host limits the size of the files you can upload. You can see this limit under Tools > Site Health > Info > Media Handling ("Max size of an uploaded file"). If the theme's ZIP file is larger than this limit, install the theme with one of the ways below, or ask your hosting provider to increase the limit.
A child theme inherits the functionality and styling of the parent theme. If you want to change the theme's code, use the child theme: your changes are kept when you update the parent theme (see the Update section).
This theme is coded to high standards to ensure seamless compatibility with plugins.
The theme's features, like the card, the portfolio, the contact form and the shortcodes, are built into the theme, so you don't need an extra plugin for them. Go to Appearance > Install Plugins to install the recommended plugins. All of them are free plugins from WordPress.org:
Importing demo data (posts, pages, theme settings, etc.) is the quickest and easiest way to set up your new theme. It allows you to simply edit everything instead of creating content and layouts from scratch.
Before you import the demo, make sure your server meets our system requirements (WordPress and PHP versions, and PHP limits such as memory and upload size). You can check your current values under Tools > Site Health > Info > Server. If you are not sure whether your server meets them, contact your hosting provider.
First, go to Appearance > Install Plugins, and install and activate the plugins listed there. Then choose one of the following methods. A low upload size limit on your server can stop the import. In this case, you need to increase it; see this article for how to do it.
Use this method if the one-click import doesn't work on your server. The files are in the "Sample Data" folder of the theme package. If the theme has more than one demo, each demo has its own folder.
The import doesn't change your settings. To make your site look like the demo, set these yourself:
Permalinks are the permanent URLs to your individual pages and blog posts, as well as your category and tag archives. A permalink is the web address used to link to your content.
For more information
The settings of this theme are in two places: most of them are in Theme Options, and the fonts and the blog settings are in the Customizer.
Go to Theme Options in your dashboard menu, right below "Dashboard". The settings are grouped in tabs on the left, and each setting has a short help text under it. Click "Save Changes" in the right column to save the settings of the open tab.
Go to Appearance > Customize. While you change the settings, you can see the changes live on your website.
To add small style changes, use Appearance > Customize > Additional CSS, or the "Custom CSS" field in Theme Options > Custom Code. For changes in the theme's code, use the child theme, so that your changes are kept when you update the theme (see the Installation and Update sections).
For more information
Widgets are independent sections of content that can be placed into widgetized areas.
This theme uses the widgets that come with WordPress, like Text, Custom HTML, Recent Posts, Categories and Search, and the widgets of your plugins. It doesn't add widgets of its own.
You can also add widgets in Appearance > Customize > Widgets, with a live preview.
Pages are similar to posts in that they have a title, body text, and associated metadata, but they are different in that they are not part of the chronological blog stream, kind of like permanent posts. Pages are not categorized or tagged, but can have a hierarchy. You can nest pages under other pages by making one the "Parent" of the other, creating a group of pages.
When editing a page/post in the WordPress editor, you will find a Settings sidebar on the right-hand side of the screen. This panel contains various options and settings related to the page, such as:
These settings control how the page is displayed. You can find more information about the Settings sidebar in this article.
The theme also adds a "Sidebar" box to the settings sidebar of pages (see Page Sidebar below).
You can assign a custom template to any page by editing it in the WordPress admin area. To select a custom page template, open the Template dropdown in the settings sidebar.
The theme's page templates:
Other pages use the Default Template. Write their content with blocks, and with the theme's shortcodes (see the Shortcodes section).
Some page templates include a sidebar area that can display widgets such as recent posts, categories, or custom content.
By default, pages have no sidebar. To show one on a page, select it in the "Sidebar" box of the page: "Page Sidebar", "Blog Sidebar", "Post Sidebar", or a widget area you created in Theme Options > Sidebars (see the Sidebar section). The pages shown on the card and the page with the "Homepage" template have no sidebar.
After selecting a sidebar, go to Appearance > Widgets and add any widgets you want to the sidebar you chose for that page (see the Widgets section).
Managing pages is very similar to managing posts, and the screens can be customized in the same way. You can also perform the same types of actions, including narrowing the list by using the filters, acting on a page using the action links that appear when you hover over a row, or using the Bulk actions menu to edit the metadata for multiple pages at once.
Learn more about Managing Pages.
Useful Resources
Learn how to get the most out of the WordPress block editor when publishing your content.
WordPress allows you to choose what your homepage displays. You can use a classic blog page showing your latest posts, or you can assign a static page. If you don't want a blog page on your site, you can set a static homepage only. Creating a blog page is optional. To set a static homepage, simply create (or choose) a page and assign it as the Homepage in Settings > Reading.
Note: Like the demo site, your homepage should show the card. The card is the page that uses the theme's "Homepage" template. If you import the demo, select its "Home" page as your homepage (see After the Import).
Then select this page as your homepage (see below) and set up the panels of the card (see the The Card section). Use only one page with the "Homepage" template.
Your homepage shows your site as a folded card. The card has four panels:
The navigation at the top of the card switches between the panels. Each panel has its own address: the address of the card followed by "#/home", "#/resume", "#/portfolio" or "#/contact".
On large screens, the card opens and folds in 3D. On screens narrower than 960 px and on Android devices, the theme uses the classic layout instead: a flat page that shows one panel at a time. To use the classic layout on every device, check "Activate Classic Layout" in Theme Options > Animation.
The content of each panel comes from a page:
The titles of the Resume, Portfolio and Contact pages are the headings of their panels. The four pages don't have a page of their own on your site: when a visitor opens one of them, for example from your menu, the card opens at its panel (see the Menu section).
Add each shortcode in a "Shortcode" block, like the pages of the demo. You can also add the shortcodes with the shortcode generator of the "Classic" block (see the Shortcodes section).
Tip: The demo content has these four pages with the shortcodes of the demo site. Import it and edit the pages (see the Demo Import section).
The front cover shows your logo or title and your tagline (Theme Options > General), and below them the content of the Front Cover Page. Use the cover_caption shortcode for the captions: its title is shown small, and the text after it large.
[cover_caption title="I AM FROM"]EARTH[/cover_caption] [cover_caption title="I CREATE"]HTML5 websites[/cover_caption] [cover_caption title="I LIKE"]minimalistic design[/cover_caption] [cover_caption title="FREELANCE"]Available[/cover_caption]
The texts on the front cover are sized to the width of the cover. To make them larger or smaller, change "Cover Title Size", "Cover Tagline Size", "Cover Caption Size" and "Cover Caption Sub Size" in Theme Options > Animation: a higher number makes the text smaller.
To add an X (Twitter) box with a link to your profile at the bottom of the front cover, fill in the fields in Theme Options > Social.
The Resume panel shows the content of the Resume Page. The demo builds it with these shortcodes (see the Shortcodes section for all of their options):
[about_text]I am a [label]theoretical physicist[/label] developed the general theory of relativity.[/about_text] [section_caption title="EMPLOYMENT"] [history_group] [history_unit date="since 2011"] <h4>Lead UX Designer</h4> <h5>Apple Inc.</h5> Worked in so many projects for best clients around the world. [/history_unit] [/history_group] [button align_center="yes" new_tab="" text="DOWNLOAD CV" url="#"] [section_caption title="DEVELOPMENT SKILLS"] [skill_group] [skill_unit percent="100"]HTML5[/skill_unit] [skill_unit percent="70"]jQuery[/skill_unit] [/skill_group] [section_caption title="TESTIMONIALS"] [testimonial_group] [testimonial image_url="" image_alt="Albert Einstein" name="Albert Einstein" position="CEO / Gravity Inc."]He is a great and hardworking guy.[/testimonial] [/testimonial_group] [section_caption title="SERVICES"] [service_group] [service icon="icon-laptop" title="Web Design"]I design super cool websites.[/service] [service icon="icon-tablet" title="Mobile Development"]I can develop iOS and Android apps.[/service] [/service_group]
To show your latest blog posts at the end of the Resume panel, go to Theme Options > Blog and choose a style in "Blog Posts on Resume Page": "History style", "Testimonial style" or "Service style". "Number of Posts to Show" sets how many posts are listed (10 by default).
The Contact panel shows the content of the Contact Page. The demo builds it with social icons, a letter with your contact details and a stamp image, and a contact form:
Please feel free to contact me about anything. [section_caption title="LET'S SOCIALIZE"] [social_icons] [social_icon type="facebook" title="" url="https://www.facebook.com/username"] [social_icon type="linkedin" title="" url="https://www.linkedin.com/in/username"] [social_icon type="github" title="" url="https://github.com/username"] [/social_icons] [section_caption title="DROP ME A LINE!"] [contact_form_wrap] [letter_wrap] [letter_info] <h4>Johnny Doe</h4> <em>johnny@example.com</em> - Planet Earth [/letter_info] [stamp alt="Johnny Doe" url=""] [/letter_wrap] [contact_form to="yourname@example.com" captcha="yes"] [/contact_form_wrap]
The form sends the messages through WordPress, with your site name as the sender. When you reply, your reply goes to the visitor's email address. If the messages don't arrive, install an SMTP plugin, like WP Mail SMTP, or ask your hosting provider whether your server can send email.
To show a map, add a "Custom HTML" block and paste the embed code of your map, for example from Google Maps ("Share" > "Embed a map"), into a map shortcode:
[map]<iframe src="https://www.google.com/maps/embed?pb=..."></iframe>[/map]
Here, you will find the information you need to create a blog post. Once you have created your blog post, you can publish it on your blog page. Blog posts have a title, body text, and associated metadata, and they are part of the chronological blog stream. Posts are categorized and tagged, but can not have a hierarchy. Post categories can have a hierarchy. You can nest categories under other categories by making one the "Parent" of the other, creating a group of categories.
If you have any questions about blog page and blog posts, feel free to reach out to us on our support forum. We are happy to assist you!
Let your creativity flow and craft engaging blog posts to share. This will enhance the value of your website and also help it rank higher in search engines.
When editing a page/post in the WordPress editor, you will find a Settings sidebar on the right-hand side of the screen. This panel contains various options and settings related to the page, such as:
These settings control how the page is displayed. You can find more information about the Settings sidebar in this article.
The theme doesn't add boxes to posts. Pages have a "Sidebar" box (see the Pages section), and portfolio items have a "Details" box (see the Portfolio section).
Creating a blog page in WordPress is simple, and you can do it in just a few steps. Here's how (see also the Homepage section):
Now, whenever you publish a new blog post, it will automatically appear on your blog page. Happy blogging!
You can use categories to define sections of your site and group related posts. The default category is "Uncategorized" until you change it in the WordPress Writing settings.
You can assign keywords to your posts using tags. Unlike categories, tags have no hierarchy, meaning there's no relationship from one tag to another.
The Post Formats feature in WordPress allows you to use different styles and layouts for various types of content. This feature helps your theme make posts more dynamic and user-friendly.
On the post edit screen, you can choose the format of a blog post. To do this, open the edit screen of a post and locate the "Format" option in the settings sidebar on the right-hand side.
Note: You can change the post format of an already published post at any time. Simply edit the post and select a different "Format" from the options. WordPress will automatically adjust the layout based on the new format, ensuring that your content remains visually appealing.
WordPress provides a variety of Post Formats, each designed for specific types of content. When creating a post, you can enhance its layout using the WordPress Block Editor.
In the block inserter menu, you will find suitable blocks for each post format. For example, the "Gallery" format supports the "Gallery" block, and the "Video" format supports the "Video" block. To quickly find the right block for a format, simply type the format name (e.g., "Image," "Quote," or "Video") into the block search field. WordPress will automatically suggest the most relevant block for your post format.
This theme supports the following WordPress Post Formats:
JOHN: Hey there MARY: Aye, matey! JOHN: Huh?
Sidebars allow you to display additional content alongside your main blog page and individual posts. This can include widgets such as recent posts, categories, search bars, social media links, and advertisements.
The sidebars are turned on by default. To check:
Then go to Appearance > Widgets and add widgets to the "Blog Sidebar" and "Post Sidebar" widget areas (see the Widgets section). When the "Post Sidebar" is empty, single posts show the "Blog Sidebar".
Your latest post is also shown on the front cover of the card, and you can list your latest posts on the Resume panel (see the The Card section).
Hovering over a row in the posts list will display action links that allow you to manage your post. You can perform the following actions:
Learn more about Managing Posts, Categories and Tags.
Useful Resources
Learn how to get the most out of the WordPress block editor when publishing your content.
The portfolio is built into the theme, so you don't need a plugin for it. You can see the "Portfolio" menu in your dashboard. Your portfolio items are shown on the Portfolio panel of the card.
The "Type" option decides what happens when a visitor clicks the item on the Portfolio panel:
The editor of portfolio items has an "Insert Shortcode" button in its toolbar, which adds these shortcodes for you (see the Shortcodes section).
[pf_lightbox_image first_image="yes" title="" url=""]
[pf_lightbox_image title="" url=""]
[pf_lightbox_video title="" url=""]
[pf_lightbox_audio title="" url=""]
first_image="" ... yes for the first image of the gallery (the image shown first). Leave it out for the others.
title="" ... (optional) The title shown in the lightbox.
url="" ... pf_lightbox_image: The URL of the image (Media > Library, "File URL").
pf_lightbox_video: The embed URL of the video, like https://player.vimeo.com/video/37254322 or https://www.youtube.com/embed/(video ID).
pf_lightbox_audio: The embed URL of a SoundCloud track (the "src" address in SoundCloud's embed code).
The Portfolio panel of the card shows all your portfolio items, with the departments as filters at the top. Its heading is the title of the page you selected as the "Portfolio Page" in Theme Options > Pages (see Card Pages).
You can also add content to that page, for example an introduction. By default, it is shown below the portfolio items. To show it above them, set "Portfolio Page Content Position" to "Top" in Theme Options > Pages.
On the page of a portfolio item, the arrows open the next and previous items, and the "close" button returns to the Portfolio panel of the card.
The shortcodes are built into the theme, so you don't need a plugin for them. The pages of the card on the demo site are built with them (see the The Card section).
Some shortcodes work together: a wrapper shortcode (like history_group) holds item shortcodes (like history_unit). Keep them together as in the examples below.
[row] [column width="6" offset=""]Content here.[/column] [column width="6" offset=""]Content here.[/column] [/row] width="" ... 1-12. The widths of the columns in a row add up to 12. offset="" ... (optional) 1-12. An empty space before the column.
[cover_caption title="I AM FROM"]EARTH[/cover_caption] title="" ... The small text of the caption. The text between the tags is shown large.
For the Front Cover Page (see Front Cover Page).
[section_caption title="EMPLOYMENT"]
A heading for a section of a page, like "EMPLOYMENT" or "SKILLS" on the Resume page.
[about_text]I am a [label]theoretical physicist[/label] developed the general theory of relativity.[/about_text]
about_text shows an introduction in a larger, centered text. label highlights a few words in a text.
[history_group] [history_unit date="since 2011"] <h4>Position</h4> <h5>Company</h5> Description. [/history_unit] [history_unit date="2007 - 2011"] <h4>Position</h4> <h5>Company</h5> Description. [/history_unit] [/history_group] date="" ... The time period, like "2007 - 2011" or "since 2011".
For your work experience and education. Write the position as a Heading 4 and the company or school as a Heading 5.
[skill_group] [skill_unit percent="100"]HTML5[/skill_unit] [skill_unit percent="70"]jQuery[/skill_unit] [/skill_group] percent="" ... 0-100. The length of the bar.
[testimonial_group] [testimonial image_url="" image_alt="" image_link="" name="Albert Einstein" position="CEO / Gravity Inc."]Text of the testimonial.[/testimonial] [testimonial image_url="" image_alt="" image_link="" name="Walter White" position="Chemist / Freelancer"]Text of the testimonial.[/testimonial] [/testimonial_group] image_url="" ... The URL of the photo (Media > Library, "File URL"). image_alt="" ... A short description of the photo. image_link="" ... (optional) A link for the photo.
[service_group] [service icon="icon-laptop" title="Web Design"]Description of the service.[/service] [service icon="icon-tablet" title="Mobile Development"]Description of the service.[/service] [service icon="icon-globe" title="Social Media"]Description of the service.[/service] [/service_group]
icon="" is the name of a Font Awesome 3 icon, like icon-laptop. The theme includes Font Awesome 3.0, so the icons added in later versions aren't available.
[button text="DOWNLOAD CV" url="" new_tab="" align_center=""] url="" ... The address the button opens. new_tab="" ... (optional) yes opens the address in a new tab. align_center="" ... (optional) yes centers the button.
[tags] [tag text="HTML5"] [tag text="CSS"] [tag text="jQuery"] [/tags]
[social_icons] [social_icon type="facebook" title="" url="https://www.facebook.com/username"] [social_icon type="twitter" title="" url="https://x.com/username"] [/social_icons] type="" ... behance, blogger, digg, dribbble, facebook, flickr, github, instagram, lastfm, linkedin, pinterest, rss, skype, tumblr, twitter (X), vimeo, wordpress, youtube title="" ... (optional) The text shown when the mouse is over the icon.
[contact_form_wrap] [letter_wrap] [letter_info] <h4>Your Name</h4> <em>Your email address</em> Your address or position. [/letter_info] [stamp alt="" url=""] [/letter_wrap] [contact_form to="" captcha=""] [/contact_form_wrap]
A contact form next to a letter with your contact details and a stamp image. You can also use contact_form alone. See Contact Page for its options and how the messages are sent.
[map]<iframe src="https://www.google.com/maps/embed?pb=..."></iframe>[/map]
Paste the embed code of your map into a "Custom HTML" block, inside the map shortcode.
[image src="" alt="" title="" width="" height=""] [divider] src="" ... The URL of the image (Media > Library, "File URL"). width="", height="" ... (optional) The size of the image in pixels.
divider adds a horizontal line.
[portfolio_field]Description of the project.[/portfolio_field]
Use it in the content of Standard portfolio items (see the Portfolio section).
See "Portfolio Item Types" in the Portfolio section.
All texts of the theme are translatable. You can translate them into your language with a plugin (Loco Translate) or with a desktop editor (Poedit).
The theme includes a template file that contains all of its texts: bookcard.pot, in the "languages" folder of the theme. You can also use translation to change the theme's English texts. For example, category archives show the title Browsing Category. You can create an "English (United States)" translation and change this title to something like Posts under Category.
Important: Don't save your translation files in the theme folder. Theme updates replace the whole theme folder, so your translations would be deleted. Save them in one of the folders described below, which theme updates don't touch.
bookcard-de_DE.po and bookcard-de_DE.mo for German. Then upload them to the "wp-content/languages/themes/" folder.
Go to Settings > General and choose your language in "Site Language". Your translation appears on the site only when the site language matches it.
To publish your content (posts, pages, and menus) in more than one language, use a multilingual plugin. For the theme's own texts, most of these plugins use the theme's translation files, so translate the theme first as described above.
A backup is a copy of your site that you can go back to if something goes wrong, like a failed update, a broken plugin or a hacked site. Keep recent backups, and keep at least one copy outside your server.
A full backup has two parts. You need both to restore your site:
Keep copies outside your server (in cloud storage or on your computer), so you can restore your site even if your server has a problem. See WordPress Backups to learn more.
Restore your site with the same tool you used to back it up. In UpdraftPlus, go to Settings > UpdraftPlus Backups, find the backup in the list of existing backups and click "Restore". For hosting backups, use your hosting control panel or ask your hosting provider.
Note: From time to time, check that your backups work, for example by restoring one on a test site.
Choose one of the following ways. With the Envato Market plugin, you don't need to download anything. For the other two ways, download the new theme package from your ThemeForest account and unzip it. The theme file to upload (bookcard.zip) is inside the "Theme/1 - Parent Theme" folder of the package, in the folder with the new version number.
Note: The "Theme/1 - Parent Theme" folder also has a "Previous Version" folder, with the ZIP file of the previous theme version. If your site has a problem after an update, you can go back to the previous version: install this file the same way, via WordPress or via FTP.
The Envato Market plugin connects your site to your ThemeForest account. WordPress can then check for updates of the themes you purchased and install them.
You don't need to activate another theme or delete the current one first. Switching to another theme and back can mix up your menu locations and widgets.
Note: If your host doesn't allow uploading large files, update the theme via FTP.
You can upload files to your site with an FTP client or with the file manager in your hosting control panel. See Updating WordPress using FTP to learn more about both.
Note: Don't upload the new folder over the old one. Files that were removed in the new version would stay on your server.
The theme doesn't come with plugins of its own. The plugins it recommends (see the Plugins section) come from WordPress.org, so you can update them like your other plugins, in Dashboard > Updates or on the Plugins page.
Keep WordPress up to date, because new versions include security fixes (see the Security section). Before you update to a new major version of WordPress, make a backup and check whether a theme update for the new version is available. You can find your theme's page on ThemeForest in the Pixelwars portfolio.
If you prefer to start major updates yourself, go to Dashboard > Updates and click "Switch to automatic updates for maintenance and security releases only". Maintenance and security releases will still be installed automatically. Don't postpone major updates for long.
Using a WordPress site securely is essential for protecting your website from potential threats. Here are some key security recommendations:
Always keep WordPress, themes, and plugins updated to the latest versions to prevent security vulnerabilities. See the Update section to learn how to update the theme.
Download the theme and its updates only from your ThemeForest account or through the Envato Market plugin (see the Update section). Download plugins only from WordPress.org or from their developers' websites. Never use "nulled" (pirated) copies of themes or plugins: they often contain hidden malicious code that can give attackers control of your site.
Delete the themes and plugins you don't use. Deactivated themes and plugins still stay on your server, and a security flaw in them can still put your site at risk. Don't delete the parent theme if you use its child theme, and keep one default WordPress theme (like Twenty Twenty-Five) as a fallback.
WordPress runs on PHP, and old PHP versions no longer receive security fixes. You can see your PHP version under Tools > Site Health > Info > Server. If it is no longer a supported version, ask your hosting provider to switch to a newer one. Before switching, update WordPress, your theme, and your plugins.
Don't use "admin" or other easy-to-guess usernames. WordPress doesn't let you change a username, so if your site has an "admin" account, create a new administrator account with a unique username, log in with it, and delete the old account. When WordPress asks what should be done with the content owned by that user, choose "Attribute all content to another user" and select your new account. Otherwise, all posts and pages of the old account will be deleted.
Ensure that you use complex passwords for your admin panel, database, and hosting account. Consider using a password manager. Don't re-use the same password on different services, especially if you are using the same username.
Ensure your website uses HTTPS with an SSL certificate. Most hosting providers offer free SSL via Let's Encrypt. Once your site opens with https://, go to Settings > General and change both "WordPress Address (URL)" and "Site Address (URL)" to start with https://. See HTTPS for WordPress for more details.
Use a security plugin like Wordfence, Kadence Security (formerly iThemes Security), or Sucuri Security to add extra protection layers. Important: If you decide to use a security plugin, make sure to activate only one at a time. Running multiple security plugins simultaneously may cause conflicts and errors.
Prevent brute-force attacks by limiting the number of failed login attempts. Wordfence and Kadence Security include this feature. If you don't use one of them, you can use a plugin like Limit Login Attempts Security (formerly Limit Login Attempts Reloaded).
For additional security, enable 2FA for your WordPress login to prevent unauthorized access. With 2FA, you enter a one-time code from an app on your phone after your password. WordPress doesn't include 2FA by default. Wordfence and Kadence Security include this feature. If you don't use one of them, you can use the Two Factor plugin.
Use a backup plugin like UpdraftPlus or your hosting provider's backup service to prevent data loss (see the Backups section).
By following these security measures, you can significantly reduce the risk of attacks and keep your WordPress site safe.