I don't know about you, but I researched to see what others were doing to maintain their blog secure, and when I first secured my WordPress site, I found information I was completely confused. And some of the data was actually over the top or superstitious. People told me rename this folder to rename this file and set up these ten plugins. It appeared to be a lot of energy and work.
Installing the fix wordpress malware plugin Scan plugin will check all this for you, and alert you that you may have missed. It will also tell you that a user named"admin" exists. That is your administrative user name. You can follow a link and find instructions if you desire. Personally, I believe that a password is enough security that is good, and there have been no attacks on the several blogs that I run because I followed those steps.
After spending a couple of days and hitting a few spots around town, I finally find a cafe which provides free, unsecured Wi-Fi and to my pleasure, there are a ton of folks sitting around each day connecting their laptops to the"free" Internet services. I use my handy dandy cracker tool that is Wi-Fi and sit down and log my link myself. Remember, they're all on a network.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More. Definitely more if you make frequent additions and changes to your website. If you make changes multiple times every day, or have a community of people which are in there all the time, a daily backup should be a minimum.
As I (our fictitious Joe the Hacker) know, people have far too many usernames and passwords to remember. You've got Twitter, Facebook, your online banking, LinkedIn, two site logins, FTP, internet hosting, etc. accounts that all come with logins and passwords you will need to remember.
Do your homework and some hunting, but if you're pressed for time and want to get this done once and for all, try out the WordPress security plugin that I use. It is a relief to know that my website (and company!) are secure.