I will cover some basics of password security and site protection.
My top four (4) rules for Passcode protection:
1. Use a completely random string for your password
2. Change that string at least once per month
3. Give only limited access to folders on your domain/hosting/database account changing the password immediately after each transaction.
4. NEVER GIVE ANYONE ACCESS TO YOUR SITES ROOT FOLDER UNLESS ABSOLUTELY NECESSARY.