A few routine habits can help protect a WordPress website.
Secure your accounts
Use strong unique passwords, limit user access, and enable additional protection when available.
Maintain your website
Keep WordPress, themes, and plugins updated, and maintain reliable backups before making major changes.