While you can’t completely eliminate the possibility of your site being hacked, you can take steps to make that event less likely. One step you should consider is to change the URL of your WordPress login page to something less common than /admin or /wp-login. You are free to change that address to anything you like, and creating a unique URL for your own page will make it harder for a would-be hacker to find the WordPress login page.