The WordPress management tools include built-in security features to protect your site from common attacks.
Go to WordPress → Manage → Security in the sidebar.
Restrict access to wp-login.php (the WordPress login page) by specifying allowed IP addresses. Only visitors from those IPs can reach the login form — everyone else gets blocked.
Enable maintenance mode with a single click while you're making updates. Visitors see a "site under maintenance" message instead of a half-finished page.
Under WordPress → Manage → Debug, you can toggle:
| Toggle | What it does |
|---|---|
| WP_DEBUG | Shows PHP errors and warnings on screen. |
| WP_DEBUG_LOG | Writes errors to a log file instead of showing them. |
| WP_DEBUG_DISPLAY | Controls whether errors appear on the front-end. |
Use debug mode to troubleshoot issues, then turn it off when you're done.