Year and a half taught us that WordPress security shouldn't be taken lightly by any means. Between 15% and 20% of the planet's high traffic sites are powered by WordPress. The fact that it is an Open Source platform and everyone has access to its Source Code makes it a tempting prey for hackers.
Finally, installing the fix malware problems free Scan plugin alert you that you may have missed, and will check all this for you. Additionally, it will inform you that a user named"admin" exists. Needless to say, that is the user name. If you desire you can follow a link and find instructions for changing that name. I think that there is a password enough protection that is good, and there have been no attacks on the several sites that I run, because I followed these steps.
It is not unusual for blogs to be hacked by some person today. Actually, even entire domains get hacked. There is not any way you will actually understand anything about programming languages or codes if you are not a programmer or a developer. This is the reason why a number of the people who do not know anything about codes wind up if there are some methods to protect their sites and investments from such hackers thinking.
It's a WordPress plugin. They are drop dead simple to install, have all the functions you need for websites a job such as this, and are relatively cheap, especially when compared to having to hire someone to have this done for you.
You could get an SSL Encyption Security to your WordPress blogs. The SSL Security makes encrypted and secure communications with your blog. So that all transactions are recorded, you can keep history over at this website of communication and the all of the cookies. Make sure all your sites get SSL security for protection.
Just make sure you decide on a plugin that's up to date with the current version and release of WordPress, and next which you may schedule, restore and replicate.