Disable WPS
Don't use a weak wifi password
Set strong password for Admin
Use MAC filtering
Disable SSID broadcast in your modem
Avoid Public Wi-Fi
Don't forget to change default router admin password