How to secure your WordPress Site ?

  1. Keep WordPress and Its Plugins Updated.
  2. Change Admin Login URL and Admin username.
  3. Make Your Passwords Secure.
  4. Password Protect the WP-Admin Directory.
  5. Protect the wp-config.php file.
  6. Set directory permissions carefully.
  7. Disable directory listing with .htaccess.
  8. Forcing Strong User Account Passwords.
  9. Remove your WordPress version number.
  10. Install a WordPress firewall plugin.
  11. Switching to HTTPs.
  12. Perform Regular Back-Ups.