New! Save Time Securing WordPress With User Groups

February 12, 2020

The iThemes Security Pro plugin already helps you lock down your WordPress website down to the user-level with the User Security Check and User Logging features. Today, we are excited to roll out the New User Groups feature gives you the power to enforce the right level of security for the right people.

Introducing User Groups: The Right Amount of Security for The Right People

There is a balance of restriction and usability that you must strike when implementing a security strategy. Using the new User Groups, you can create a group of everyone who can make changes to your site and give them the freedom to make changes to security settings.

[embedded content]

Any user that can make changes to your website becomes a security threat when their access falls into the wrong hands. With great power comes great responsibility. Any group that has the power to change your site has the responsibility to secure their account with two-factor authentication.

new-save-time-securing-wordpress-with-user-groups New! Save Time Securing WordPress With User Groups

Whether you are running an eCommerce shop or a membership site, you have a group of users who don’t have the power to do any damage outside of their account. While it is helpful to give your customers the tools to protect their accounts, it doesn’t mean you have to require them to use them.

new-save-time-securing-wordpress-with-user-groups-1 New! Save Time Securing WordPress With User Groups

 

How To Create A Custom User Group

To create a custom group, click on the User Groups module from the main page of the Security settings.

new-save-time-securing-wordpress-with-user-groups-2 New! Save Time Securing WordPress With User Groups

Now click on the + New Group Button.

new-save-time-securing-wordpress-with-user-groups New! Save Time Securing WordPress With User Groups

Enter a name for your group and then select the members of your group. User Groups have two different methods of selecting group members.

new-save-time-securing-wordpress-with-user-groups-3 New! Save Time Securing WordPress With User Groups
  1. The first and recommended method of selection is the WordPress User Roles you already have on your site. Check the boxes next to user role(s) you want to include in this group and then click the Create button to finish creating the group. 
  2. The second method of selection is the WordPress users on your site. Enter the name of the users in the Select Users search field to add the users to the group. Click the Create button to finish creating your new group.

You don’t need to create custom groups to take advantage of the new User Groups. After installing or upgrading iThemes Security Pro, User Groups will automatically create groups from your existing WordPress user roles.

Manage All User Security Settings From One Location

There are several settings in iThemes Security Pro that, by design, will affect how people will interact with your site. Two-factor authentication will require additional verification to log in, and with Password Logins, you use a Magic Link from an email bypassing the traditional WordPress login.

With User Groups, you can quickly see which settings are enabled and make modifications without having to hop around to the different settings in iThemes Security Pro. Click the toggle switch next to a setting to change if it is enabled or disabled.

new-save-time-securing-wordpress-with-user-groups-4 New! Save Time Securing WordPress With User Groups

User Group Settings

  1. Global – When enabled, the users in the group will be able to access and make changes to the iThemes Security Pro settings.
  2. Dashboard – Allow the users of the group to create new iThemes Security Dashboards.
  3. Grade Report – Enable to allow group users to view the iThemes Security Grade report.
  4. Force Two-Factor – Force the users in the group to use two-factor authentication on their account.
  5. Disable Two-Factor Onboarding – Disable the two-factor onboarding for users in the group.
  6. Allow Remembering Device – Allow users to check a “Remember this Device” box that, if checked, will not prompt the user for a Two-Factor code for the next 30 days on the current device. Requires the Trusted Devices feature.
  7. Applications Passwords – Allow the users in the group to use application passwords.
  8. User Logging – When enabled, the users in the group will have their activity recorded in the iThemes Security logs.
  9. Password Logins – Allow the users of the group to use the Passwordless Login method.
  10. Allow Two-Factor Bypass for Passwordless Login – When using the Passwordless Login method, users in the group will be able to bypass any 2fa requirement.
  11. Trusted Devices – Enable Trusted Devices for this group.

Updated Security Modules

After making changes to a User Group, the settings will automatically be updated in the corresponding settings module. For example, if we force our Power User Group to use two-factor authentication, the Two-Factor settings will be updated to reflect the change.

new-save-time-securing-wordpress-with-user-groups-5 New! Save Time Securing WordPress With User Groups

If you add or remove the two-factor requirement from inside the Two-Factor settings, the changes will be updated in the corresponding User Group.

New! Frictionless Sync Pro Connection

new-save-time-securing-wordpress-with-user-groups-6 New! Save Time Securing WordPress With User Groups

When connecting a site from the iThemes Sync Pro dashboard, Sync will check to see if iThemes Security Pro is installed. If it is, Sync Pro will hook into Security Pro to complete the connection even if you are securing your WordPress login with two-factor authentication and reCAPTCHA.

Wrapping Up

User Groups give you a central location to enable the right settings for the right people.

To take advantage of this update, you’ll need iThemes Security Pro 6.4.0 and WordPress 5.2. Current iThemes Security Pro, Plugin Suite and Toolkit customers will find the 6.4.0 update available now as an automatic update from the WordPress dashboard (for licensed sites) or as a manual download from the iThemes Member Panel. Save time updating all your sites at once from the iThemes Sync dashboard.

Get the iThemes Security Pro Plugin Today

iThemes Security Pro, our WordPress security plugin, offers 30+ ways to secure and protect your website from common

Source

Share this article:
 

eHost managed wordpress hosting

We’re listening.

Have something to say about this article? Share it with us on Facebook, Twitter or LinkedIn:

SHARE IT HERE:

Related Posts

How to make a WordPress website

How to make a WordPress website

Have you always wanted to create your own website? WordPress is the way to go! Whether you want to create your own personal blog, an online store, or a business website – with WordPress, creating your own website is easy as pie. If you know what you’re doing, of...

Get ALL Your SEO, WordPress & Divi News

Join Our Daily Roundup

SEO News and More

SEO News and More

Subscribe ToThe Weekly SEO Trade News Updates

Get the latest SEO, SEM and SMM marketing intel, tips and tricks from one of the best SEO Gurus online. 

Every Tuesday morning we send out an aggregated email listing all new posts on SEO Trade News.

Excellent! Now check your email to confirm your subscription.