Use strong passwords Limit admin users Keep everything updated Remove unused plugins/themes Enable SSL (HTTPS)