Install the rename your login url to secure your wordpress website Firewall Plugin. This plugin investigates requests that are net with straightforward WordPress-particular heuristics to recognize and stop attacks that are obvious.
Strong passwords - Do your best to use a password, alpha-numeric. Easy to remember passwords are easy to guess!
You also need to set the"Anyone Can Register" in Settings/General to away, and you ought to have some type of spam plugin. Akismet is the old standby, the one I use, but there are many of them nowadays.
Black and whitelists official website pathological-looking phrases based on which field they appear within. (unknown/numeric parameters vs. known this hyperlink post bodies, remark bodies, etc.).
The plugin should be updated play nice with your other plugins, to stay current with the latest WordPress release and have WordPress and restore capabilities. The ability to clone your site (in my site addition to regular copies ) can be helpful if you ever want to do an offline website redesign, among other things.