Keep WordPress and Its Plugins Updated. Change Admin Login URL and Admin username. Make Your Passwords Secure. Password Protect the WP-Admin Directory. Protect the wp-config.php file. Set directory permissions carefully. Disable directory listing with .htaccess. Forcing Strong User Account Passwords. Remove your WordPress version number. Install a WordPress firewall plugin.Read More →