You definitely need a security plug-in, and this one is a great choice

Even for someone as ignorant as me in terms of security, it’s easy to set up numerous features that help you blocking the vast majority of attacks.
Bonus: very clear explanations help you understand the whys and hows, which is much more than a nicety: it makes you less prone to making similar mistakes on other systems, and that is invaluable.