20 Simple Tricks to Secure Your WordPress Website in 2018 (including 2FA)
codeinwp.com