If you’re interested in the basics of web security —and you should be — check out this fantastic interview with Anselm Hannemann on CSS Tricks. You’ll learn about how HTTPS can instantly prevent bad situations like this:

If you log in over HTTP to your backend, your credentials are sent in plaintext to the server. So, anyone who intercepts your WiFi or internet connection now has access to your CMS…

Getting started with HTTPS has never been easier. Let’s Encrypt, while a bit complicated, will give you a free SSL/TLS certificate for your website. If you’re working with PHP, Laravel Forge has made it ridiculously easy to secure your server with Let’s Encrypt or other paid security certificates.