> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://copilhost.crisp.help/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Why a strong password is crucial for WordPress

Having a strong password is the foundation of WordPress security.

**Brute force attacks (**where bots automatically test hundreds of passwords per second) are among the most common types of cyberattacks.

In practice, these attacks only succeed on sites with weak passwords or those lacking traffic filtering. 
Common passwords like "123456", your first name, or a birthdate must be avoided at all costs.

### The secret to a "Brute Force-proof" site:

To never worry about these attacks again, simply use:
* **12 characters or more.**
* A mix of **uppercase and lowercase letters, numbers, and special characters.**

With a password this strong, even without additional security plugins, it would take a bot thousands of years to crack it.

### Use a Password Manager

Want to use "indestructible" randomly generated passwords without having to memorize them?
We recommend using a **Password Manager** like **Dashlane** or **LastPass**.

These tools act as a secure digital vault:
* You only need to remember one **Master Password**.
* They automatically fill in login forms for you on your browser or smartphone.
* You no longer need to "know" your passwords, allowing you to use complex strings like: `!NLhEPm63LJcC$@Bo7`.

### 2FA: Adding an extra layer of security

While a strong password is vital, **Two-Factor Authentication (2FA)** is the gold standard for maximum security.
2FA requires a user to confirm their identity through a second step (such as an email code or an app notification) before they can access the dashboard.

Plugins like **Solid Security** or **FluentAuth** allow you to set this up easily.

**⚠️ A note on User Experience (UX):** Think carefully before enforcing 2FA for everyone. If every site forced a double identity check for every login, it would be frustrating for users!
* **Our advice:** Enable 2FA for key accounts (Administrators) and simply enforce a strong password policy for regular users.

### Managing multiple accounts on your site

If your site has many users, a security plugin like **Solid Security** is the perfect tool.
It allows you to set a global **Password Policy**, forcing every member of your site to choose a strong password before they can log in.