Choose a Good Hosting Company
Don't Use Nulled Themes
Install a WordPress Security Plugin
Use a Strong Password
Disable File Editing
Install SSL Certificate
Change your WP-login URL
Limit Login Attempts