SecurityNo, deleting the account won't fix it
Google flagged my passwords as compromised. Deleting the breached account won't help. Here's what a reused password really costs, and how to stop it happening again.
Blog
The bits of the web that aren't obvious.
Short, plain-English notes for people who have websites and want to know a little more about how to get them right. No jargon, no scare tactics, just what we'd say if you asked us over a cup of tea.
All posts
Security
AccessibilityThe developer "tricks" that quietly break your website
Six shortcuts a well-meaning developer reaches for that quietly lock people out. For each one: what to ask whoever builds your site, and the fix.
SecurityFive free ways to back up your WordPress site today
No developer needed, no budget required. Five free ways to get a complete, off-server backup of your site in about half an hour.
SecurityThat WordPress plugin may be your biggest security risk
Every plugin you add is a door. We look at how to decide which doors are worth opening, and how to spot the ones that should already be closed.
AccessibilityYour colour scheme might be turning people away
Low-contrast type is the most common accessibility issue we find, and the easiest to fix. Here's what to test, and how to test it in five minutes.
AccessibilityWhat WCAG actually is, and why it's not as scary as it sounds
WCAG is the standard for accessible websites. We translate the bits that matter for community sites into plain English, and call out the bits you can skip.
SecurityWhat SSL certificates actually do (and don't do)
That little padlock isn't a sign that a site is safe. We explain what an SSL/TLS certificate actually proves, and what it definitely doesn't.