Even if you have a relatively small website, it is likely that you eventually have to deal with hackers. One of the most common methods of hacking is the brute force attack – here hackers will cycle through numbers and letters to try to crack your password. It has happened to Joomla users in recent memory, so it is important to be prepared as much as possible.

The reason that these brute force attacks were successful encompasses a number of different factors. First, you have unlimited login attempts with the Joomla platform. This means that brute force hackers can continue to try until they gain access or are detected. While there is not much the average user can do about this, you can use different tactics to make your site more secure against these hackers.

1. Don’t use the admin username
Many times, the most common usernames are targeted such as admin, webmaster, administrator, test, etc. These all are very common usernames and that’s why, it makes sense to avoid using them. Don’t worry, from the backend, you can select a different name that’s publicly visible. This means that your username can be “amazingme” and you can choose a different name to be displayed on the front-end.

2. Use a strong password
Use a strong password and avoid common passwords such as fghj, 2221, 12345, your name, etc. The brute force attack targets all the common passwords first, and that’s why you should use a strong password that is a combination of uppercase and lowercase letters, numbers and special characters like #@*^. For example; a strong password would be something like h@LL003v3ryB0dy^^#. Also, never use the same password at two different places.

3. Limit login attempts
It is highly recommended that you limit login attempts. This can be done by using a security plugin like Better Joomla Security, or by using Limit Login Attempts plugin.

4. Update core and add-ons to improve Joomla security
Since the most common successful attacks are due to known vulnerabilities in outdated Joomla versions and add-ons, one of the most important tasks for anyone responsible for Joomla security is to ensure that all the software remains up to date.
Thus, one of the most important features that has been added to Joomla is the new Joomla Update Manager which can be used to easily update many extensions, as well as the Joomla Update component to update Joomla itself.

5. Backup often
Take regular backup of your complete Joomla site. Some people don’t give importance to backup, and unfortunately, they realize the value of backup only after a disaster strikes. Also don’t rely much when your host says that they regularly perform backup, because if they don’t, then it will create more problems.