- Install the newest version only
- Don't install from cpanel/fantastico. Do it yourself.
- Change the secret keys in wp-config.php to something different
- Change the database prefix in wp-config.php from the default wp_
- Install only necessary plugins (prevents exploits from direct input)
- Remove unused themes (prevents exploits from direct input)
- Remove unused plugins