Installing the fix malware problems free Scan plugin alert you that you may have missed, and will check most of this for you. It will also inform you that a user named"admin" exists. Needless to say, that is your administrative user name. If you desire you can follow a link and find directions for changing that title. Personally, I believe that there is a password security that is good, and there have been no successful attacks on the numerous blogs that I run since I followed these steps.
I might find it a little harder to crack your password if you're among the ones that are proactive. But if you're one of the ones that are reactive, I might my response just get you.
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. If you make changes and frequent additions to your website, definitely. If you make changes multiple times a day, or have a community of people that are in there all the time, a daily backup should be a minimum.
WordPress is one of the most popular platforms for websites and blogs. While WordPress is pretty secure from the box, there are always going to be individuals who wish to make trouble by finding a way to crack into sites or accounts to cause harm or inject hidden spammy links. That's why it's essential to be sure that your WordPress installation is as secure as possible.
I prefer to use original site a WordPress plugin to get the job done. Make sure the plugin you choose is in a position check to do backups that are select, has restore and can clone. Be sure that it is often updated to keep pace. There's absolutely no use in backing your data up and not functioning.