<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>BetterShield blog</title><description>WordPress security guides from the BetterShield team: the security checklist, getting back in when locked out, AI assistants, and product news.</description><link>https://bettershield.ai/blog/</link><language>en</language><item><title>Disable file editing in WordPress with or without DISALLOW_FILE_EDIT</title><link>https://bettershield.ai/blog/disable-file-editing-wordpress/</link><guid isPermaLink="true">https://bettershield.ai/blog/disable-file-editing-wordpress/</guid><description>Why to disable file editing in WordPress, how DISALLOW_FILE_EDIT and BetterShield’s one-click fix each do it, what it can affect, and how to put it back.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress activity log: what it records and what to look for</title><link>https://bettershield.ai/blog/wordpress-activity-log/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-activity-log/</guid><description>A WordPress activity log shows who did what, and when. What BetterShield’s audit log records, how its sealed days work, and what to look for in it.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress application passwords: find, limit and revoke them</title><link>https://bettershield.ai/blog/wordpress-application-passwords/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-application-passwords/</guid><description>WordPress application passwords sign tools in without a second factor. How to find unused ones, revoke an application password, and limit the rest.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress breached password check: what leaves your site</title><link>https://bettershield.ai/blog/wordpress-breached-password-check/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-breached-password-check/</guid><description>How BetterShield’s WordPress breached password check uses Pwned Passwords: what leaves your site, which passwords it checks, and what happens to old ones.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress hardening: 16 one-click fixes and what each changes</title><link>https://bettershield.ai/blog/wordpress-hardening/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-hardening/</guid><description>A WordPress hardening checklist in one click: what each of BetterShield’s 16 fixes changes, what it can affect, and which to watch with Monitor first.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress user roles security: least privilege without guesswork</title><link>https://bettershield.ai/blog/wordpress-user-roles-security/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-user-roles-security/</guid><description>WordPress user roles security in practice: the audit checks for risky accounts and roles, two-factor by role, and alerts when an account gains more power.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Introducing BetterShield: a free WordPress security plugin</title><link>https://bettershield.ai/blog/introducing-bettershield/</link><guid isPermaLink="true">https://bettershield.ai/blog/introducing-bettershield/</guid><description>BetterShield is a free WordPress security plugin that runs 54 checks, explains what it finds, and closes the gaps with one-click fixes you approve.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress MCP: connecting an AI assistant to your site safely</title><link>https://bettershield.ai/blog/ai-assistant-wordpress-security/</link><guid isPermaLink="true">https://bettershield.ai/blog/ai-assistant-wordpress-security/</guid><description>What a WordPress MCP connection lets an AI assistant read and change, six questions to ask before you connect one, and how BetterShield answers them.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Change WordPress login URL: quieter logs, not a stronger door</title><link>https://bettershield.ai/blog/change-wordpress-login-url/</link><guid isPermaLink="true">https://bettershield.ai/blog/change-wordpress-login-url/</guid><description>How to change the WordPress login URL with BetterShield, what moving wp-login.php really stops, and why limits, two-factor and passkeys still matter.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Should you disable XML-RPC in WordPress? How to decide and do it</title><link>https://bettershield.ai/blog/disable-xml-rpc-wordpress/</link><guid isPermaLink="true">https://bettershield.ai/blog/disable-xml-rpc-wordpress/</guid><description>Should you disable XML-RPC in WordPress? What xmlrpc.php does, what still uses it, and how to preview, watch, apply and undo the change.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Limit login attempts in WordPress without locking yourself out</title><link>https://bettershield.ai/blog/limit-login-attempts-wordpress/</link><guid isPermaLink="true">https://bettershield.ai/blog/limit-login-attempts-wordpress/</guid><description>How to limit login attempts in WordPress: sensible numbers, pauses that never lock the account, proxy and Cloudflare checks, and a way back in.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Locked out of WordPress? How to get back in without FTP</title><link>https://bettershield.ai/blog/locked-out-of-wordpress/</link><guid isPermaLink="true">https://bettershield.ai/blog/locked-out-of-wordpress/</guid><description>Locked out of WordPress? BetterShield’s recovery link, printed codes, unlock email and WP-CLI get you back in without FTP or a call to your host.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress file integrity check: compare with the official copies</title><link>https://bettershield.ai/blog/wordpress-file-integrity-check/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-file-integrity-check/</guid><description>A WordPress file integrity check compares core and plugin files with the copies WordPress.org publishes. How BetterShield runs one, and what to do next.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>The WordPress security checklist: 54 checks, explained</title><link>https://bettershield.ai/blog/wordpress-security-checklist/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-security-checklist/</guid><description>A practical WordPress security checklist: the five areas BetterShield audits, the checks that matter most in each, and what to do about every finding.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress security headers, explained: what each one does</title><link>https://bettershield.ai/blog/wordpress-security-headers/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-security-headers/</guid><description>WordPress security headers in plain words: what each one tells the browser, what it could affect, and how to add HSTS and a content policy safely.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item><item><title>WordPress two-factor authentication and passkeys: a setup guide</title><link>https://bettershield.ai/blog/wordpress-two-factor-authentication/</link><guid isPermaLink="true">https://bettershield.ai/blog/wordpress-two-factor-authentication/</guid><description>Set up WordPress two-factor authentication with any authenticator app, add passkeys, require both by role, and help someone who lost their phone.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>