I back up my blogs using a plugin WP DB Backup. If anything happens I can restore my website. I use WP Security Scan plugin to scan my blog regularly and suspicious-looking asks to be blocked by WordPress Firewall to fix wordpress malware cleanup.
Safeguard your login credentials - Don't keep your login credentials where they might be found by a hacker. Store them off, as well as offline. Roboform is good for protecting them. Food for thought!
Should you ever wish to migrate your site elsewhere, such as a new hosting company, you'd have the ability to pull this off without a hitch, and also without needing to disturb address your old site until the new one was in place and ready to roll.
Another step to take to make WordPress more secure is to upgrade WordPress to the latest version. The main reason behind this is that there also come fixes for older security holes which makes it essential to update early.
Change your password, frequently, or at least admin username and your WordPress password and collect and utilize other fantastic WordPress security tips to dig this keep hackers out!