I don't know about you, but when I was first securing my WordPress blog, and I was researching to find out what others were doing to keep their blog secure, I found so much information that I was completely confused. And some of the data was in fact on superstitious or the top. People told me to rename this file, rename this folder and set up these ten plugins. It appeared to be a bit of work and effort.
Backing up your site also helps in securing from fix wordpress malware fix hackers. You have to keep a copy of your files hide away in backup system so you can be certain of your database. This makes you a protected files that serves you in times of down that is sudden is the system. Hackers are less likely to steal from a bonded back up system.
Don't make the mistake of believing that your hosting company will have your back so far as WordPress backups go. Not always. It's been my experience that the company may or may not be doing backups, while they say they do. Take that kind of chance?
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely if you make changes and frequent additions to your website. If you have a community of people that are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
You can extend the plugin features with premium plugins Recommended Reading such as: Amazon S3 plugin, Members only plugin, DropShop etc.. I think this plugin is a fantastic option and you can use it for free.
However, I advise that you install the Login LockDown plugin as opposed to any.htaccess controls. That will stops login requests from being allowed from a for an hour or other so after three failed login attempts. You can still access your mobile while from your workplace, and yet you still have good protection against hackers, if you accomplish that.