A step-by-step checklist covering SSL, strong passwords, two-factor authentication, and the best security plugins.