Best Plugin for Secure WordPress from Cracker/Hacker

The following is wordpress plugin to keep and protect security wordpress from cracker or hacker

1. Limit Login Attempts
   By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
2. WP Security Scan
   Scans your WordPress installation for security vulnerabilities and suggests corrective actions.-passwords
   -file permissions
   -database security
   -version hiding
   -WordPress admin protection/security
   -removes WP Generator META tag from core code
3. Secure WordPress
   Secure WordPress beefs up the security of your WordPress installation by removing error information on login pages, adds index.html to plugin directories, hides the WordPress version and much more.
   1. Removes error-information on login-page
   2. Adds index.php plugin-directory (virtual)
   3. Removes the wp-version, except in admin-area
   4. Removes Really Simple Discovery
   5. Removes Windows Live Writer
   6. Removes core update information for non-admins
   7. Removes plugin-update information for non-admins
   8. Removes theme-update information for non-admins (only WP 2.8 and higher)
   9. Hides wp-version in backend-dashboard for non-admins
   10. Removes version on URLs from scripts and stylesheets only on frontend
   11. Blocks any bad queries that could be harmful to your WordPress website
4. WordPress Firewall
   Feautures:
   • Detect, intecept, and log suspicious-looking parameters — and prevent them compromising WordPress.
   • Also protect most WordPress plugins from the same attacks.
   • Optionally configure as the first plugin to load for maximum security.
   • Respond with an innocuous-looking 404, or a home page redirect.
   • Optionally send an email to you with a useful dump of information upon blocking a potential attack.
   • Turn on or off directory traversal attack detection.
   • Turn on or off SQL injection attack detection.
   • Turn on or off WordPress-specific SQL injection attack detection.
   • Turn on or off blocking executable file uploads.
   • Turn on or off remote arbitrary code injection detection.
   • Add whitelisted IPs.
   • Add additional whitelisted pages and/or fields within such pages to allow above to get through when desirable.