I back my blogs using a free plugin WP DB Backup up. I will always restore my website to the 13, if anything happens. I use WP Security Scan free plugin to scan my blog frequently and WordPress Firewall to block requests that are suspicious-looking to secure your wordpress site.
The one I recommend, and the approach, is to use one of the creation and storage plugins available on your browser. RoboForm is liked by people, but I believe after a trial period, you need to pay for it. I use the free version of Lastpass, and I recommend it for those of you who use Firefox or Internet Explorer. That will generate visit this web-site passwords for you; you use one master password to log in.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely, if you make regular additions and changes to your site. If you make changes multiple times every day, or have a community of people which are in there all the time, a daily backup should be a minimum.
Make a note of your new password! I recommend the paid or free try this site version of the software that is protected *Roboform* to remember your passwords.
However, I advise that you install the Login LockDown plugin rather than any.htaccess controls. Login requests will be stopped by that from look what i found being allowed from a specific IP-ADDRESS for an hour or so after three failed login attempts. If you accomplish that, you can still access your admin cell while from your workplace, and yet you still have protection against hackers.