Avoid using a username such as "Admin". Doing so subjects your blog to bots. Then, your entire site is at risk. Delete all users who call themselves "administrator" or "admin". Choose a new username.
Do not share your password. In addition, only download and implement plugins with good reviews from reputable sources. If your site is hacked or the victim of malware, your hard work could all be lost.