I use the ThreeWP Activity Monitor plugin to keep an eye on what's being poked at, but in terms of increasing security, I use the Google Authenticator plugin and have enabled two-factor authentication on my account. That means that even if you should happen to have my password for some reason, you still can't login without the two-factor number from Google Authenticator.

Another aspect is to minimize the number of accounts, period.