How to handle security on a wordpress site? [closed]

You cannot be 100% sure you are safe.

Check this Security reading from WordPress.

That been said, there are some things you can do.

  • Keeping WordPress Updated
  • Keeping theme and plugins Updated
  • Use Strong Passwords
  • You can use a Security Plugin, although it’s arguable. When a client request it I use Sucuri.
  • Change the Default “admin” username
  • Limit Login Attempts
  • Change WordPress Database Prefix
  • Use double authentication

All that won’t be enough but it will give intruders a hard time trying to get in.