Security tuneup for WordPress

14 Vital Tips to Protect Your WordPress Admin Area (Updated) MFA IP ACLs Strong passwords No password hints Account lockout Password policy Logging