When I was in college, one of my company instructors told us students that one of the greatest hurdles to making money was procrastination.
I back up my blogs using a plugin WP DB Backup. I will always restore my blog to the last settings if anything happens. I use my site to be scanned by WP Security Scan free plugin regularly and suspicious-looking asks to be blocked by WordPress Firewall to fix malware problems free.
Essentially, it will all start with the basics. Try using complex passwords. Use numbers, letters, special characters, and spaces and combine them to make a password. You could use.
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely more if you make changes and additions to your site. If you make changes multiple times a day, or have a community of people which are in there all the time, a daily backup should be a minimum.
Install the WordPress Firewall Plugin. This plugin investigates web requests with easy WordPress-specific heuristics to recognize and stop obvious attacks.
However, I recommend that you install the Login LockDown plugin rather additional hints than any.htaccess controls. Login requests will be ceased by that straight from the source from being allowed from a specific IP-ADDRESS for an hour or so after three unsuccessful login attempts. It is still possible to access your mobile while from your office, and yet you still have protection against hackers, if you accomplish this.