Restrict wp-login.php and /wp-admin/ Access by IP address utilizing .htaccess file(s).
Auto upload your media files to a subdomain on the same server AND change default path.
Unfortunately, a lot of WordPress plugins and themes aren’t developed with performance in mind.
Pick a WordPress Theme is easy, fun and will make a big impact.
Installing an SSL on your website is good for everyone and easy to do.