Some more tips :
1. IP Protect your AdminCP directory.
Find out your IP address (or IP range, if you have a dynamic ip address), and then restrict access to your AdminCP directory for all IPs, except your own IP address; using an .htaccess file placed in your adminCP directory.
Example : If your IP range is 122.154.*.*
Then you can use this .htaccess code to restrict the access :
Code:
order deny,allow
deny from all
allow from 122.154.
2. IP Protect your hosting control panel
If your webhost allows it, you can also request your webhost to restrict cPanel access to everybody, except from your own IP address/range. This will make it even harder to break into your control panel. This way, even if somebody knows your pass, he won't be able to login as the IP won't match.