Protect your account's sign-in process.
Install WordPress on a safe host
Use the most recent version of WordPress.
Bring your PHP installation up to date.
Set up plugins to increase safety.
Install a WordPress theme that has been verified as secure.
Switch on secure HTTPS/SSL connections.
Arrange a firewall.