Through using a fix wordpress malware attack backup plugin, the best way to make sure your WordPress security is in my opinion. This is a fairly inexpensive, elegant and easy to use way to be certain your web website is available to you.
Don't depend on your internet host - Many people rely on their web host to"do all that technical stuff for me", not realizing that sometimesthey don't! Far better to have the responsibility lie rather than out.
Yes, you need to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More. If you make changes and frequent additions to your site, definitely. If you make changes multiple times try these out every day, or have a community of people navigate to this website that are in there all the time, a backup should be a minimum.
Another step to take to make WordPress more secure is to always upgrade WordPress. The main reason behind this is that with each upgrade there come fixes for security holes that are old which makes it essential to upgrade early.
However, I recommend that you set up the Login LockDown plugin as opposed to any.htaccess controls. That will stops login requests from being allowed from a certain IP-ADDRESS for an hour or so after three failed login attempts. If you accomplish that, you can access your admin cell while and yet you still have good protection against hackers.