Installing the how to fix hacked wordpress site Scan plugin alert you to anything that you may have missed, and will check most of this for you. It will also inform you that a user named"admin" exists. Of course, that is your user name. If you wish you can follow a link and find instructions for changing that title. I think that a strong password is enough protection that is good, and there have been no attacks on the sites that I run since I followed these steps.
Protect your login credentials - Don't keep your login credentials where they might be found by a hacker. Store them offsite, and even offline. Roboform is for protecting them very good . Food for thought!
You should also set the"Anyone Can Register" in Settings/General to away, and you should have some sort of spam plugin. Akismet is the one I use, the old standby, but there are many of them nowadays.
You can even get an SSL Encyption Security for your WordPress blogs. The SSL Security makes encrypted and secure communications with your site. You can also keep history of communication and the all of the cookies so that all transactions are listed. Make sure all your blogs get SSL security for protection from hackers.
These are three very simple things you can do to maintain try this website WordPress secure without plugins. Put a blank Index.html file in your folders, run your web host security scan and backup your entire account.