Wordpress has 2FA, and so do several web hosting services. I'd recommend activating 2FA where you have it. Also, make sure the machine you're working on has virus protection - at least Windows defender if using PC.