There is a portion of config-sample.php that is led'Authentication Unique Keys.' Four explanations that appear inside the block will be found by you. There's a hyperlink secure your wordpress website within that part of code.You change, copy the contents that you return, and have to enter that link in your browser. This makes it harder for attackers to rapidly generate a'logged-in' dessert for your site.
The one I recommend, and the approach, is to use one of the password generation and storage plugins available on your browser. Many people like RoboForm, but I believe after a trial period, you have to pay for it. I use the free version of Lastpass, and I recommend it for those who use Internet Explorer or Firefox. That will generate passwords for you.
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely, if you make changes and frequent additions to your website. If you have a community of people which are in there all the time, or make changes multiple times a day, a backup should be a minimum.
BACK UP your site frequently and keep a copy on your computer and storage. If you have a website, back up daily. You spend a lot of money and time on your website, do not skip this! The one complete solution that does it all is BackupBuddy, no other plug-ins back up database, widgets, official source plugins and your documents. Need to move your site to another server, this will do it in under a few minutes!
But realize that security is something you must start thinking about. Don't only be the reactive type, consider action to start today, protecting yourself. Don't let Joe the Hacker make your life miserable and turn everything in creating come crashing down in a matter of moments, that you've worked so hard.