5 Ways to Share Login Passwords More Securely

  1. Password Pusher
    Limited to sharing passwords only
  2. QuickForget
  3. Text
    Note: Apple uses end-to-end encryption to protect iMessages on iPhones. However, Android users must configure a third-party encryption tool, such as Signal, to secure text messages from prying eyes.
  4. Phone Call
    Sounds crazy, doesn’t it?
  5. In Person
    Sounds even crazier, right?!

And remember, secure passwords should:

  1. Be at least 14 characters
  2. Include alpha, numeric and special characters
  3. Include upper and lower case letters
  4. Not include any real words
  5. Be unique – i.e. not used anywhere else

WordPress 5.0 is coming!

[Queue: Game of Thrones theme song]

As you may have heard, with this pending 2018 major update, Automattic plans to release its new ‘rich media’ Gutenberg Editor. By default, this new editor will be enabled, replacing the ‘Classic Editor’ – a WYSIWYG HTML Editor, built on the open source TinyMCE editor used by many Content Management Systems. If you haven’t heard – well, this is considered the biggest change to WordPress in over a decade – possibly ever.

Opinions about the new editor are mixed, to say the least. The pre-release Gutenberg Editor Plugin currently has only a 2.5 star rating. Pre-release anxiety and tensions are high due to possible Plugin and Theme conflicts that could impact tens of thousands of sites.

The new editor aims to provide in-Page/Post layout flexibility by editing site content via ‘blocks,’ which can be manipulated. In the hands of a competent visual designer, Gutenberg offers flexible tools for creating page layouts inside Theme Templates. Layouts that were previously available only via code-bloated Page Builder Plugins (e.g. Visual Composer), Premium Paid Template Themes, and other third party tools.

Critics complain that the new editor takes more time to use. That its click-based User Interface originates from phone and touch devices vs. desktop computers where most content is created. Ultimately, that Gutenberg’s ambition moves away from the WordPress ‘Code is Poetry’ simplicity model – breaking semantic SEO-friendly HTML, and not being as inclusive for visitors using assistive technology devices. In the hands of less skilled content creators, could WordPress morph into the next Microsoft FrontPage? Remember MySpace websites? Some contributing developers have even spun off a new branch of WordPress that excludes Gutenberg.

My own opinion is that the editor is a move in the wrong direction: an attempt by WordPress to compete with popular DIY, template page building products – such as SquareSpace, WIX, Weebly, and others. This is particularly true for non-brochureware, content-rich websites because the editor requires more steps to enter and edit each ‘block’ of content.

From your WordPress entry Dashboard, you can already take the new editor for a ‘pre-release’ spin by installing and activating the Plugin. Administrators take caution, particularly with some third-party Plugins and Themes that may not be compatible with Gutenberg. Be sure you have full backups of your sites. Note: all of my custom sites are based on Themes that adhere to WordPress’ coding standards – so *theme* conflicts should hopefully be minimized. For those of you who do choose to experiment with the new Editor, I would greatly appreciate your candid feedback.

For most clients, unless not satisfied with the existing editor, I will recommend they “install the Classic Editor” to continue using the traditional Visual/Text editor. At least until more real world data is gathered. WordPress remains the *most popular Content Management System in the world,* powering ~30% of websites (~75 million). Comparable CMSs can require up to 20 hours or more of training to use. With over 56,000 open source Plugins in its repository, WordPress’ value is not going away tomorrow, or with the release of WordPress 5.0.

Feel free to connect if you have any questions.

Learn More

  1. https://wordpress.org/gutenberg/
  2. https://wordpress.org/plugins/gutenberg/
  3. https://wordpress.org/plugins/classic-editor/
  4. https://deliciousbrains.com/wordpress-gutenberg/
  5. https://www.dedoimedo.com/computers/wordpress-gutenberg.html

5 Tools to Measure Your Website Performance

You’ve probably heard that your website should load in under 2 seconds.

Did you know the average web page size in 2017 was ~2.4 Mb?
And the median page size was ~1.9 Mb.

That doesn’t mean much unless you know that Google recommends a maximum page size of ~500 Kb for optimum mobile performance.

5 Tools to help you measure your website performance

  1. WebPageTest
    Originally developed by AOL, this is an open source project supported by Google. On cable connections, the median Speed Index score is 3.519 [seconds]; the top 10th percentile is <1.388.
  2. Pingdom
    In addition to free performance measurement tools – this site provides uptime monitoring starting at $9.95/month.
    Be sure to choose a test location that best represents your target audience.
  3. GTMetrix
    Also provides performance-optimized managed hosting.
  4. Google PageSpeed Insights
    One of the more well-known and popular testing tools. Provides benchmarks for desktop and mobile views. Good scores > 80. Medium scores = 60 – 79. Below 59 implies significant opportunities for improvement.
  5. Google Lighthouse
    Part of Google Chrome Developer Tools. This open-source, automated tool measures the quality of web pages with audits of best practices, performance, accessibility and search engine optimization.

Website Performance Benchmarks

Be aware that database-driven websites, like WordPress, are optimized when web server requests < 40 – 60. Web server requests are the Javascript, CSS, font, image and other files needed to load your site. These server requests can often contribute more to page latency, up to 75% of page load speed, than overall page size.

Limitations of Website Performance Metrics

Not all measurement tools are created equal. For example, many tools do not evaluate whether your website hosting server runs under HTTP/2. Because HTTP/2 allows multiple, concurrent browser downloads, performance recommendations like concatenation (‘combining web server assets’ – e.g. image sprites) is less important. And tools generally don’t analyze DNS optimization efforts like the quality of your domain registrar and TTL (Time To Live) values.

If your site is not running optimally, please contact me to discuss performance optimization.

5 Must-Use Plugins for WordPress

There are over 50,000 Plugins in the WordPress repository. And that doesn’t count the tens of thousands of premium (proprietary) Plugins being sold by third-parties outside of WordPress.

In his book The Paradox of Choice: Why More is Less, Malcolm Gladwell presented a study where consumers purchased more jam when given 6 choices vs. 24 choices. Stick to these 5 WordPress Plugins and you won’t have to sample the other 49,995+ choices.

  1. Search Engine Optimization
    I prefer Yoast SEO. Despite getting fatter with features over the years, Yoast delivers the SEO benefits that most sites need, with ample opportunity to upgrade.
  2. Performance
    A caching Plugin is a must for any WordPress site. For SiteGround-hosted clients, I use SG Optimizer. A2 Hosting also provides its own performance Plugin. WP Super Cache or WP Rocket are great alternatives for sites hosted with other providers.
  3. Security
    I prefer Sucuri Security, with its optional (paid) firewall. iThemes Security Pro is another reputable option, although it takes longer to set up.
  4. Forms
    For form-building, I trust Gravity Forms due to its rich features and extensive library of modular third-party add-ons. Ninja Forms would be my second choice. Many other form plugins include bloated code that does not meet ADA accessibility guidelines for visitors using assistive technology devices.
  5. One Plugin to Rule Them All
    JetPack. Yes, JetPack. This is the mother of all Plugins. A swiss army knife of security. A kitchen sink of Widgets. The cats meow. Sharks with laser beams… Ok, not really. JetPack gets a bad rap for performance. However, if your site is already optimized – close to 500 Kb and < 60 server requests, then JetPack is an awesome tool. I use it for brute force protection, image galleries, lazy loading images, conditional sidebars and footers, social media integration, and more. Plus, because it’s an Automattic Plugin – I fully trust it.