Add and activate Plugins:
* Wordfence by Wordfence
* Limit Login Attempts by Limited Login Attempts Reloaded
* Disable XML-RPC-API by Neatma
* WPS Hide Login by WPServeur, NicholasKulka, wpformation (then rename path name differently for wp-admin
If using GoDaddy server
* In cPanel Admin
* FILES>Directory Privacy>public_html>eachdomain.com>wp-admin (lock with a password)
Once locked. You have to manually return to cPanel and unlock to access and edit website, even from cPanel.
Relock when done editing site.
