One of the first things you do when you set up a WordPress site is work on the colors, font, layout, and appearance. Then it's time to add text and data. But what about WordPress security? Don't allow the fun of setting up a site that is new distract you from the objective of protecting the information you're putting online.
It helped me although my first step isn't one you must take. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did what I should have done before I started my website. And here is where I would like you to start. Learn hacked. The beautiful thing about rename your login url to secure your wordpress website and why so many people recommend because it is so easy to learn it is. That can important site be a detriment to the health of our sites. We have to learn how to put in a safety fence around our site.
Safeguard your login credentials - Do not keep your login credentials where they might be found by a hacker. Store them offsite, and even offline. Roboform is for protecting them good . Food for thought!
Recently, the site published a fake news article and of Reuters was murdered by go now an unknown hacker. Since Reuters is a news site, their reputation is ruined because of what the hacker did. The same thing may happen to you if you don't pay attention on the safety of your WordPress blog.
What if you visit WP-Content/plugins, can you view that folder? If so, upload that blank Index.html file inside that folder as well so people can't see what plugins you have. Because if your version of WordPress is up to date, if you are using an old plugin or a plugin using a security hole, someone can use this to get access.
Of course it's possible to set up more plugins to make your shop more user friendly like share buttons or automatic backup plugin. That's all. Your shop is up and her response running!