Here is some tactical advice for you to implement in your WordPress site so that you can restrict access and put better controls on your system.

  1. Create an author or editor role for yourself and use this account for all your posting.
  2. Don’t use the admin role for posting content. Only use the admin role for specific administrative functions such as upgrades.
  3. Only allow your WordPress web server to access the WordPress database. Don’t allow everyone on the internet to even be able to get to the front door of your database and attempt a login.
  4. Restrict login attempts and protect your site against brute force attacks with a plugin. Limit Login Attempts works well for this.