332 practical guides to website speed, SEO, email deliverability, DNS, security and automation, with fixes you can copy and paste.
Want to generate a password based on a word? Why single words with swaps are weak, how to build a strong passphrase around one, and what NIST and CISA advise.
How QR code scams work on UK parking meters, emails and letters, how to check where a code goes before you open it, and where to report quishing.
A practical WordPress security checklist covering updates, logins, 2FA, file permissions, wp-config.php, XML-RPC, backups and headers, with snippets.
The CA/Browser Forum cut maximum TLS certificate lifetimes to 200 days in 2026, 100 in 2027 and 47 in 2029. Here is the schedule and how to prepare.
Fix expired certificates, name mismatches, incomplete chains and mixed content warnings with clear diagnosis steps and openssl, Nginx and Apache commands.
The warning signs of a hacked website, from spam search results to rogue admins and redirects, plus a step-by-step first-response plan to contain and recover.
What the Secure, HttpOnly and SameSite cookie attributes and the __Host- prefix protect against, which values to use, and how to set them in PHP and Node.
The HTTP security headers every site should send, what each one does, and ready-to-paste configs for Nginx, Apache and Cloudflare Transform Rules.
How HSTS forces HTTPS, how to choose max-age, when includeSubDomains is safe, and why the HSTS preload list is a commitment you cannot quickly undo.
MD5 vs SHA-256 explained: why MD5 collisions make it unsafe, when it's still fine for checksums, and why neither should store passwords. Use bcrypt or Argon2id.
What is a JWT? How JSON Web Tokens are structured, what the claims mean, how signing works, and the security mistakes (alg none, weak keys, storage) to avoid.
How to create a strong password using the NCSC's three random words, why length beats complexity, and where password managers, 2SV and passkeys fit in 2026.
Popular topics
Free website audit
Speed, SEO, DNS, email (SPF/DKIM/DMARC) and security in one scan, with a prioritised fix list.
Make It Flow assistant
Tools, guides and AI automation
Hi! I can find the right free tool, explain an audit result, or tell you how Make It Flow can automate any part of your business. What do you need?
Book a free 15-minute call
Pick a time that suits you. Times are shown in your time zone ().
A Make It Flow agent will confirm the call by email within 24 hours.
AI answers can be wrong. Chats are stored so the team can follow up. Privacy