@mk nifty: added a plugin called WP secure login which providea 2-factor # for logging in to your Wordpress site. I had to figure out how to set it up (set up an account, actually) on Google Authenticator, but now a new account has appeared there named after my site's name, and I can login now with password + authenticator-generated code. Very nice!