Watch the whole course free on YouTube
FreeAll 4 lessons, with captions and chapters. Open the playlist on YouTube →
- HTTPS and SSL Explained for WordPress Site Owners
From the lesson
“Before we touch a single setting, let's understand what SSL really does and why every website needs it. Think of SSL as a sealed envelope, wrapped around everything sent to and from your site. Imagine a stranger, sitting on the same free café Wi-Fi as your visitor. On an unprotected site, they could quietly read passwords and messages in transit.” Watch the full lesson →
- Install Really Simple Security and Turn On SSL
From the lesson
“Before we touch the screen, let's understand what SSL really does for your site. This plugin used to be called Really Simple SSL, and today it does much more than certificates. SSL scrambles the connection, so no one can read what passes between your visitors and the site. Once it's switched on, a padlock appears in the browser bar, which visitors have learned to trust.” Watch the full lesson →
- WordPress Hardening and Vulnerability Detection Settings
From the lesson
“Hardening means switching off the risky defaults that come with every website, and turning on early warnings when something breaks. Hardening removes handy shortcuts that attackers quietly abuse. When it works, you see nothing at all, and that's exactly the point. Vulnerability detection watches your plugins and themes for known problems. Here's the plan, in three short steps, before we open the screen.” Watch the full lesson →
- Two-Factor Login and the WordPress Security Stack
From the lesson
“In the earlier lessons you switched on the padlock and hardened your site. This lesson covers login protection, the remaining settings, and how Really Simple Security fits alongside other security tools. Two-factor login adds a second check beyond the password, so a stolen password on its own isn't enough. Some login extras are free, and some need the paid Pro version. We'll tell them apart on the screen.” Watch the full lesson →
Following along on your own site and stuck on something the video doesn't cover? Book a WordPress tutor — a live session on your own website, $85 an hour.
This Really Simple Security tutorial takes your WordPress site from unprotected to properly hardened, starting with what SSL actually does and why every site needs it. You'll move on to activating HTTPS, tightening common weak spots, and getting alerted when a plugin turns risky. In about sixteen minutes you'll have a solid security baseline.
What you'll learn
Security isn't one setting, it's a stack of small protections working together, and most WordPress sites are missing several of them. Really Simple Security bundles SSL, hardening and vulnerability detection into one free plugin so you don't have to wire each piece up by hand. This course explains what each layer guards against and how login protection fits into the wider picture, so the settings aren't just switches you flip blindly. After it you'll be able to secure a WordPress site and understand what you've actually turned on.
Inside the course
- HTTPS and SSL Explained
- Installing Really Simple Security & Activating SSL
- Hardening & Vulnerability Detection
- Login Protection, Settings & the Security Stack
Who this course is for
This is for beginners and site owners who know their site should be secured but aren't sure where to start. No security or server experience is assumed. If you've already got SSL from your host, the hardening and vulnerability sections still apply. Our free written guides and live 1-on-1 training are there if you'd like extra help.
Frequently asked questions
What does Really Simple Security do?
Do I need SSL before installing it?
Is this course free?
Every one of the 4 lessons is free to watch — you just need a free WP Tutoring account. No card, no trial clock.
- All 4 lessons in this course
- Follow along on a clean WordPress install
- Keep your free account forever