There are plenty of best practices you need to do to keep your Joomla sites safe. including: Updating passwords regularly Setting strong usernames Never using names or common identifying information in usernames or passwords Don't use your mobile number in your username or password