- Keep WordPress and Its Plugins Updated.
- Change Admin Login URL and Admin username.
- Make Your Passwords Secure.
- Password Protect the WP-Admin Directory.
- Protect the wp-config.php file.
- Set directory permissions carefully.
- Disable directory listing with .htaccess.
- Forcing Strong User Account Passwords.
- Remove your WordPress version number.
- Install a WordPress firewall plugin.
- Switching to HTTPs.
- Perform Regular Back-Ups.
2017-08-28

