I back up my blogs using a plugin WP DB Backup. I will always restore my blog to the 13, if anything happens. I use my site to be scanned by WP Security Scan plugin that is free and WordPress Firewall to block requests that are suspicious-looking to repair hacked wordpress site.
Use strong passwords - Do your best to use a password, alpha-numeric. Easy to remember passwords are easy to guess!
Maintain control of your online assets - Nothing is worse than getting your livelihood in these details somebody else's hands. Why take chances with something as important as your site?
Make a note of your password! I recommend the paid or free version of the protected software *Roboform* to remember your passwords.
I prefer to use a WordPress plugin to get the job done. Make sure that the plugin you select is in a position to do copies, has restore and can replicate. Be sure it is often Look At This updated to keep pace with all new versions of WordPress. There is no use in backing up your data to a plugin that's out of date, and not working.