- Use a strong, different password for your client area, cPanel and website.
- Turn on two-factor authentication wherever it is offered.
- Keep WordPress, themes and plugins up to date, and remove ones you do not use.
- Keep your own backups of important files.
- Never share passwords by email or chat.
If you think your account or site has been hacked, change your passwords and open a support ticket right away.
