I back my blogs using a free plugin WP DB Backup up. I can restore my website if anything happens. I use my blog to be scanned by WP Security Scan plugin that is free and WordPress Firewall to block suspicious-looking asks to fix hacked wordpress.
Backup plug-ins is also important. You need to backup all the files and database you can easily bring back your site like nothing.
There's a section of config-sample.php find more info that is headed"Authentication Unique Keys." There are. A hyperlink is inside that part of code. You need to enter that link into your browser, copy the contents which you get click for source back, and then replace the keys you have with the unique, pseudo-random keys offered by the site. This makes it harder for attackers to automatically create a"logged-in" cookie for your site.
Note that you should try this last step for setups. You'll also have to change all of the table names inside the database if you would like to do it for installations.
Utilizing a plugin for WordPress security makes great sense. WordPress backups will need to be carried out view website on a regular basis. Don't become a victim because of not being proactive!