It's also important to change admin username and your password if you are helped by someone with your site and needs admin username and your password to login to perform the job. Admin username and your password changes after all the work is finished. Someone in their company might not be even if the man is trustworthy. Better to be safe than sorry!
Finally, installing the rename your login url to secure your wordpress website Scan plugin will check all this for you, and alert you to anything that you may have missed. Additionally, it will inform you that a user named"admin" exists. Needless to say, that is the user name. If you desire you can follow a link and find directions for changing that name. I think that there is a password protection that is good, and there have been no successful attacks on the blogs that I run, because I followed these steps.
If advice you're among the ones that are proactive, I might find it a little more difficult to crack your password. But if you're one of the responsive ones, I might just get you.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. Definitely more if you make frequent additions and changes to your site. If you have a community of people which are in there all the time, or make changes multiple times every day, a backup should be a minimum.
Another step to take to make WordPress more secure is to always upgrade WordPress. The main reason behind this is that with each upgrade there come fixes for security holes that are old which makes it essential to upgrade.
Using a plugin for WordPress security just makes sense. WordPress backups need to why not check here be carried out on a regular basis. Don't become a victim of not being proactive about your 16, because!