Basic WordPress Security Tips

Remove Admin as username

Add info on not using Admin as one of the moderators of the site.

Obscure password

Add info on creating passwords that are complex, long and unique.

Disable file editing

define('DISALLOW_FILE_EDIT', true);

Limit login attempts

Add info on limiting login attempts

Hide wp-config.php and .htaccess

You can hide the wp-config.php file by adding the following to your .htacces file.
<Files wp-config.php>
order allow,deny
deny from all
</Files>
That will prevent the file from being accessed. Likewise  you can hide your .htacces file in a similar fashion by adding the following code.
<Files .htaccess>
order allow,deny
deny from all
</Files>

Change table prefix

Add info on changing table prefix

Two-step verification for login

Add info on adding two step verification