I back my blogs using a plugin WP DB Backup up. I can always restore my blog to the 13, if anything happens. I use WP Security Scan plugin that is free to scan my site frequently and WordPress Firewall to block suspicious-looking asks to how to fix hacked wordpress site.
The stronger approach, and the one I personally recommend, is to use one of the creation and storage plugins available for your browser. I believe after a trial period, you need to pay for it, although people like RoboForm. I use the free version of Lastpass, and I recommend it for those of you who use Internet Explorer or Firefox. That will generate passwords for you.
You also need to set the"Anyone Can Register" in Settings/General to away, and you should have some type of spam plugin. Akismet is the Read More Here old standby, the one I use, but there are lots of them nowadays.
If you aren't running the latest version of WordPress, upgrade. Like keeping your i loved this door unlocked when you leave for vacation, leaving your site in an old version is.
I prefer to use a WordPress plugin to get the job done. Make sure is able to do select backups, has restore and can replicate. Be sure it is often updated to keep pace with all versions of WordPress. There is no use in not functioning, and backing up your data to a plugin that is out of date.