There are several ways you can secure your VPS.

A common way to secure the VPS is to regularly update the password regularly, on a monthly or weekly basis. Another way is to not to share the VPS access to anyone else. Placing a firewall is a good measure however make sure that it doesn’t disable the Remote Desktop (RDP) feature. If it does you will not be able to perform remote desktop to your VPS.