I back my blogs regularly using a free plugin WP DB Backup up. If anything happens I will restore my blog to the last settings. I use my blog to be scanned by WP Security Scan plugin that is free regularly and WordPress Firewall to block suspicious-looking asks to fix malware problem.
It all will start with the fundamentals. Try using passwords. Use spaces, numbers, special characters, and letters and combine them to make a password that is unique. You can use usernames that are not obvious.
A snap to move - If, for some reason, you need to relocate your website, like a domain name change or a new web host, getting get more your files at your fingertips can save you oodles of time, headache, recommended you read and the need for tech help.
You could even get an SSL Encyption Security to your WordPress blogs. The SSL Security makes secure and encrypted communications with your site. You may keep the all the cookies and history of communication so that all transactions are listed. Make sure all your sites get SSL security for utmost protection.
However, I recommend that you set up the Login LockDown plugin as opposed to official statement any.htaccess controls. That will stops login requests from being permitted from a for an hour or so after three failed login attempts. You can access your admin cell while and yet you have protection against hackers if you accomplish that.