SSL Secure WordPress Admin Without Any Plugin
If you have SSL for your domain, you can secure your WordPress admin using two constants in wp-config.php file. But this opportunity is available from WordPress 2.6. You can implement it in WordPress 2.7 too.
If you want to secure whole admin interface with login information, add these two lines just after the three unique keys that you have to change in wp-config.php file:
define('FORCE_SSL_LOGIN', true);
define('FORCE_SSL_ADMIN', true);
But if you just want to secure your login information over secure connection, add only
define('FORCE_SSL_LOGIN', true);
Now you can have the choice of accessing admin both over secure or non-secure server. Https session may become a bit slow as you know.
I have got a private SSL certificate & so secured the whole admin interface using the method above.
Related posts: