Security basics

The first rule of Website Security is this: if a hacker wants to get into your website, he will. However, you don't have to make it easy for them, and hopefully, with enough safe-guards in place, the hacker will give up and move to his next victim.

In regards to WordPress, most successful hack attempts happen thanks to one of three things—a guessable password, an outdated WordPress install, or an outdated plugin.

Passwords

Instead of a short password like FlyLover use a short sentence like this: iAmAwesomeToday.

I also recommend that you make your password something, well, horribly negative; for example, "IAmStupidAndSmellFunny". The more awful and self-loathing, the better. Think about it, if someone ever asks for your password, you'll really stop and think about ever saying it out loud.

Note

Never use same password for your WordPress login and your database. If a hacker gets access to your database, they get access to everything, including the ability to execute server-side...