One tip that you should never forget to do is to password protect your admin directory.
Why you ask? Well for myself I have a number of custom scripts in the admin panel and I would hate to see those run by users that shouldn’t run them. In some cases they could damage the entire site by using them.
If you have access to a control panel for your domain then you should see something like “password protect a directory”. Simply choose to password protect the /admin/ dir and all is well.
