how to fix hacked wordpress will inform you that there is no htaccess within the directory. You may place a.htaccess record into this directory if you want, and you can use it to manage usage of the wp-admin directory by Ip Address address or address range. Details of how you can do that are plentiful around the net.
This is fantastic news because it means that there's a community of developers and users that can further improve the platform. However, whenever there's a group there will always be people who will attempt to take them down.
Move your wp-config.php file up one directory from the WordPress root. WordPress will look for it there if it cannot be found in the root directory. Additionally, nobody else will have the ability to read the document unless they've FTP or SSH access.
In addition to adding a secret key to your wp-config.php file, also think about altering your user password to something that's strong and my company unique. A great idea is to avoid phrases, use letters, and include amounts, although you will be told the strength of your password by wordPress. It's also a good idea to change your password regularly - say once every six months.
There are always going to be risks being online (or even just being alive!) Also it's easy to get caught up in the fear. We often put the breaks on when we get caught up in the panic. This isn't a reaction. Take some common sense precautions, then forge ahead. If something bad does happen, it is going to have to be dealt with then and of quaking in your boots 23, no amount will have helped. If nothing does, all is good and visit you haven't made yourself sick.