Have you ever thought about the security of your Drupal website on the web? If not, it’s high time you did that. Either be the case, here’s a simple checklist to make sure you have the essentials ready:

Drupal Security Checklist

  1. Check that your admin passwords are secure.
  2. Upgrade Drupal Core and Contrib modules to the latest version.
  3. Turn off on-screen error reporting at admin/settings/error-reporting.
  4. On the Permissions page, verify what permissions anonymous and authenticated users have been given.
  5. On the User Settings page, verify that account creation settings are as you intend (can users create their own accounts, and do they need approval?).
  6. Check Reports > Status report and make sure there are no warnings or errors.