You may well have heard all the buzz online about the attacks on WordPress security. Unfortunately this is no joke, and it needs to be taken very seriously, or all you've built could be hijacked or worse, lost to you.
I back my blogs regularly using a plugin WP DB Backup up. I can always restore my website if anything happens. I use WP Security Scan free plugin to scan my blog and WordPress Firewall to block asks to repair hacked wordpress site.
There are ways to pull this off, and a lot involve re-establishing more and databases and FTPing files, exporting and copying. Some of them are very complicated, so it's imperative that you select the one that is right. If you are not of the persuasion, then you may want to look into using a plugin for WordPress backups.
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely if you make changes and regular additions to your website. If you have a community of people which are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
Security plug-ins that were all-Rounder can be thought of as a security checker that was full. They scan and check the whole website and give you visit this site information concerning the possible weaknesses of the site.
Free software: If you have installed scripts that are free such as Wordpress, search Google for'wordpress security'. You'll get many tips on how best to make your WP blog secure.