Install the secure your wordpress website Firewall Plugin. This plugin investigates requests with WordPress-particular heuristics that are straightforward to identify and quit attacks that are obvious.
After spending a couple of days and hitting several spots around town, I finally find a cafe that provides free, unsecured Wi-Fi and to my pleasure, there are tons of people sitting around daily connecting their laptops to the"free" Internet services. I sit down and use my handy dandy cracker tool and log myself into people's computers. Remember, they are all on a network that is shared.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. Definitely if you make additions and changes to your site. If you have a community of people which are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
In addition to adding a secret key to your wp-config.php document, also think about altering your user password to something that is strong and unique. A good tip is to avoid common phrases, use upper and lowercase letters, and include numbers, although you will be told the strength of your password by wordPress. It's also a good idea to change your password regularly - say once every six months.
I prefer to use a WordPress plugin to get the work done. Make sure that the plugin you select is in a position to do copies that are select, has restore and can clone. Also be sure it is often updated to our website keep pace with all new versions of WordPress. There's absolutely no use in backing up your data and not functioning.