Initial WordPress Security

Basics and easiest

• CloudFlare
• Do not use Admin or administrator as a username
• Use strong password
• Login Lockdown like Limit Login Attempts
• Keep everything up to date and backup regularly

Additional security

• Hide Login+
• or Better WP Security (also does file monitoring)
• or BulletProof Security
• or Wordfence Security
• or just WordPress File Monitor Plus

More Secure login using:

• Clef
• Google Authenticator using Two Factor Authentication
• Social Logins