Forem: Thomas

The WordPress Security Plugins I Actually Trust in 2026

Thomas — Thu, 02 Apr 2026 14:39:36 +0000

Security plugins are one of the most misunderstood parts of running a WordPress site. Some people install five of them and hope for the best. Others skip them entirely because “security plugins slow down your site.” And then there’s the group that installs whatever has the most stars without understanding what it actually does.

So in this post, I want to share the WordPress security plugins I actually trust in 2026 — the ones I’ve seen work in real‑world scenarios, not just in marketing pages.

🛡️ Why Your Security Setup Shouldn’t Be Static

Security isn’t something you “set and forget.” Plugins evolve, threats evolve, and sometimes even great plugins fall behind or stop receiving updates. A plugin that was excellent two years ago might be a liability today.
That’s why I regularly review my setup — and why you should too.

The Security Plugins I Actually Trust

Remember, your security plugins are not static. You will have to evaluate them once in a while. Some plugins might stop to receive updates and that might be a concern as well. You might need end up skipping a great plugin, if it no longer does the job.

Below are the plugins that I trust and use on my very own blog.

1. Wordfence Security
Anti-virus, Firewall and Malware Scan. The first WordPress plugin you should always install.

2. Antispam Bee
Antispam plugin with a sophisticated toolset for effective day to day comment and trackback spam-fighting. Built with data protection and privacy in mind.

3. Really Simple Security
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate generation.

With these 3 security plugins you should have a strong baseline security for your blog. They give your firewall and malware scanning. It tells you if you have old unsecure plugins installed. Furthermore it will protect you against spammers and it will help you to configure SSL certificates and Two-factor authentication for your blog.

If you want a broader, non‑plugin approach to securing your site, I’ve also written a practical guide here:
👉 6 Tips to Secure Your WordPress Blog

The 47‑Day SSL/TLS Certificate Era Is Coming

Thomas — Fri, 13 Feb 2026 21:00:52 +0000

The SSL/TLS ecosystem is heading toward one of its biggest shifts yet. After years of steadily shrinking certificate lifetimes, the CA/Browser Forum has approved a phased reduction that will bring public TLS certificates down to a maximum validity of 47 days.
This isn’t just a rumor - it’s now backed by major CAs like DigiCert and GlobalSign, and reporting from BleepingComputer highlights how the timeline is expected to unfold. By 2029, the 47‑day era will be the new normal.

Why Certificate Lifetimes Are Shrinking

Across all sources, the motivations are consistent:

Stronger security posture Shorter lifetimes reduce the exposure window if a certificate or private key is compromised.
Faster adoption of new standards When cryptographic algorithms or validation rules change, shorter lifetimes ensure the web updates quickly.
Automation is now mature ACME has become widely supported, making frequent renewals feasible — even expected. GlobalSign emphasizes this point strongly: the industry is no longer designing around manual renewals. Automation is the baseline assumption.

The Phased Timeline (Across All Sources)

Here’s the consolidated timeline based on DigiCert, GlobalSign

What GlobalSign Adds to the Conversation

GlobalSign’s article is especially valuable because it focuses on operational readiness, not just policy changes. A few standout points:

This is a business change, not just a technical one Shorter lifetimes affect procurement, compliance, monitoring, and internal processes — not just DevOps pipelines.
Domain validation reuse windows are shrinking too DigiCert notes that domain/IP validation reuse drops from 398 days to 10 days. GlobalSign highlights how this will force organizations to rethink validation workflows.
Special cases and exemptions will exist — but they’re narrow Some enterprise use cases may have transitional exceptions, but they won’t be long‑term escape hatches.
Automation isn’t optional anymore GlobalSign is blunt: organizations that haven’t automated certificate issuance and renewal will struggle to operate in a 47‑day world.

The Bottom Line

The move to 47‑day certificates is part of a broader shift toward a more secure, more automated web. It may feel like a hassle, but it’s ultimately a win for reliability and security. And if it means fewer “our certificate expired” outages, that’s something every developer can celebrate.

If you want to check your expiration date on your blog/website, I have a written a post about a free SSL tool, that I use a lot.

Google TV Streamer 4K – Hands‑On Impressions From a Tech Reviewer

Thomas — Mon, 12 Jan 2026 20:00:25 +0000

Google quietly released a new Google TV Streamer 4K, and I’ve spent the past week testing it in my home setup. As someone who reviews hardware and writes practical tech guides, I was curious whether this new device is just a Chromecast replacement or something more interesting.
Surprisingly, it’s a bit of both.

⚙️ Why I Tested It

I’ve used Chromecast devices for years, and I was interested in how Google would approach a standalone streamer with a remote, a refreshed UI, and a more traditional streaming‑box experience.
This device feels like Google’s attempt to compete directly with:

Fire TV Stick 4K
Roku Streaming Stick 4K
Chromecast with Google TV So I wanted to see how it performs in real‑world use.

🔍 Key Takeaways From My Testing

Performance is smoother than expected for a budget‑friendly device
The Google TV interface feels more refined than on older Chromecasts
App switching and navigation are noticeably faster
The remote is simple but functional
Streaming quality is solid across major platforms (Netflix, YouTube, Disney+, etc.)
It’s clearly positioned as a low‑cost 4K streamer for everyday users. If you’re already in the Google ecosystem, this device fits right in

🔄 Chromecast vs Google TV Streamer 4

One of the biggest questions I had was whether this replaces the Chromecast experience.
Short answer: it does — but with a more traditional streaming‑box feel.
Casting still works perfectly, but you now get:

A proper UI
A remote
Better app management
Faster navigation It’s a more complete experience overall.

📦 Who This Device Is For

Based on my testing, it’s ideal for:

People upgrading from older Chromecasts
Anyone wanting a simple, fast 4K streamer
Users who prefer Google TV over Fire OS or Roku
Secondary TVs where you want a clean, responsive interface

📄 Full Review With Benchmarks & Comparison

If you want the full breakdown — including performance notes, UI impressions, and how it stacks up against competing devices — I published the complete hands‑on review here:
👉 Google TV Streamer 4K – Hands‑On Review

PowerShell ISE to VS Code in 5 Minutes — Setup Guide

Thomas — Tue, 23 Dec 2025 19:00:38 +0000

If you still use PowerShell ISE, switch to Visual Studio Code for PowerShell 7. Install VS Code, add the official PowerShell extension, and use the integrated debugger to save time.

Why I switched

I used PowerShell ISE for years because it’s simple and fast. However, PowerShell 7 and modern workflows require a more capable editor. Visual Studio Code gives you cross‑platform support, a huge extension ecosystem, and advanced debugging.

Quick setup

Install Visual Studio Code for your OS.
Install PowerShell 7 (latest stable).
Open VS Code → Extensions (Ctrl+Shift+X) → search PowerShell → install the Microsoft extension.
Set the integrated terminal to PowerShell and enable Format on Save.

One practical tip
Use the debugger to step through a function and inspect variables: set a breakpoint, press F5, then use the Variables and Call Stack panes to diagnose issues faster than logging alone.

# Run this in the integrated terminal to check PowerShell version pwsh -v

Want the full walkthrough?
Read the complete guide with screenshots, recommended extensions, and a short getting‑started videos:

PowerShell ISE Alternative: Setup Visual Studio Code

PowerShell ISE, has been my favorite tools when it comes to writing PowerShell scripts. However, it is time to move on to Visual Studio Code → PowerShell

techthatworks.net

OnePlus 13: Why It Still Holds Its Own in 2025

Thomas — Sun, 14 Dec 2025 13:25:21 +0000

Smartphone launches move fast, but not every device fades into obscurity once the next model arrives. The OnePlus 13 is a great example of a phone that continues to deliver power and elegance even after newer flagships hit the market.

🔑 Key Highlights

Battery life that beats the competition: 6000 mAh vs iPhone 15’s 3561 mAh.
Performance powerhouse: Snapdragon 8 Elite keeps multitasking smooth.
Display brilliance: Vibrant AMOLED panel with fluid refresh rates.
Usability quirks: Ultrasonic fingerprint sensor is excellent, though screen protectors can be tricky.

💡 Why It Matters
For users who want flagship performance without chasing the latest release, the OnePlus 13 remains a smart buy. Its combination of speed, endurance, and design makes it a device worth considering in 2025.

👉 I’ve published a full hands‑on review with photos, benchmarks, and real‑world impressions here: OnePlus 13 Review: Power Meets Elegance