User-agent: *
Disallow: /wp-admin/
# You can and should secure other folders too, like...
Disallow: /wp-content/
Disallow: /wp-includes/