- Keep everything updated — core, themes and plugins. Enable auto-updates in WordPress Manager by Softaculous.
- Use strong, unique passwords and avoid the username "admin".
- Turn on two-factor authentication with a reputable plugin.
- Never install nulled/pirated themes or plugins — they are a common source of malware.
- Remove unused plugins and themes.
Every account is also protected by Imunify360, which blocks attacks and scans for malware, and by automatic JetBackup backups.
