I back my blogs using a free plugin WP DB Backup up. I can restore my blog to the last settings if anything happens. I use WP Security Scan plugin that is free to scan my blog and asks that are suspicious-looking to be blocked by WordPress Firewall to fix wordpress malware.
You can search for software that will backup your files and database. If hackers abruptly hack your site, you can restore your site with the use of your files and change everything that has to be changed.
I don't think there's a person out there that after learning just how much of a problem WordPress hacking is that it is a good idea. Something I've noticed over the years is that when it comes to securing their sites, bloggers seem to be stuck in this state that is reactive.
It's time to sign up for a Facebook accounts and use identity and this individual's name. After I get it all set up, I'll be emailing you posing as your friend and asking you to be friends with me on Facebook (or Twitter, or whichever social site).
Just ensure you choose a plugin link that is up to date with release and the version of WordPress, and which you may schedule, restore and clone.