Hello, Gabriellovee! It's useful to take a few simple thoughts for a spin: - I agree with imRelease - choose a secure hosting; - Don't use FTP, it's better to go with SFTP or SCP. For example, you can work with your server with WinSCP. - Change passwords regularly: at least once a month, and always after you have given access to your website to third parties (developers or SEO you work with) - Update the CMS your websites work on: install patches and upgrade to the latest version. - Don't use any nulled software. - Back up your server to a local computer. Back it up as a rule! - Use anti-virus/malware software and manual analysis with find / grep. - Set up a firewall (for example, iptables) if you don't use shared a hosting because shared hosting provider already has to set up a firewall by default.