WordPress Tip: Making Your WP-CONFIG File Secure
A lot of people don’t realize that they’re missing unique authentication keys in their WordPress’s wp-config.php file. These unique authentication keys will help keep your WordPress site more secure. In this screencast, I show you how to add the necessary authentication keys.
Thanks for this tip, Tom. Another good tip is to move the wp-config.php file outside the web root. If your domain points to /user/home/public_html , move the wp-config.php file into /user/home
My trick is to point my domains into /user/home/public_html/webroot/website, so web users are already buried deep into my folder structure before they enter the site.
This trick is detailed in the WordPress codex.
Thanks Tony. That’s a good tip.