Ahmdosa Hacker

Complex passwords, keep upgrading where new versions come out, remove all unused plugins and themes.

Make sure to check themes is fine and no hidden back doors. Then make sure all permissions are the lowest they can go on all files without the site breaking.

But importantly, keep making backups of both the core files and database. If you get cracked, restore the database after checking to make sure there is no back doors in it and then restore using a fresh download of WordPress.

Also, shared hosting environments is only as save as the other users on the system so using something like a VPS or a server will help but only if set up correctly.