Ultimately, fix hacked wordpress will inform you that there is not any htaccess inside the directory. You can put a.htaccess record in to this directory if you want, and you can use it to manage usage of the wp-admin directory from Ip Address address or address range. Details of how you can do this are plentiful around the internet.
The stronger approach, and the one I recommend, is to use one of the password generation and storage plugins available for your browser. Many people like RoboForm, but I believe after a free trial period, you need to pay for it. I use the free other version of Lastpass, and I his comment is here recommend it for those who use Firefox or Internet Explorer. That will generate passwords for you.
Fortunately, keeping your WordPress site up-to-date is one of the simplest things you can do. For the past couple of versions, WordPress has included the ability to set up automatic updates. A new update becomes available.
Upgrade if you're not running the latest version of WordPress. Similar to keeping your door unlocked when you leave for vacation, leaving your website in an old version is.
Oh . And incidentally, I was talking about plugins. Make sure it's a secure one when you get a plugin. Do not install any plugin because the owner is saying that plugin will help you do this or that. Use perhaps, or a test blog to look at the plugin get a software engineer to analyze it carefully. This way you'll know it isn't a threat for your business or straight from the source you.