A half and year educated us that WordPress security shouldn't be taken lightly by any means. Between 15% and 20% of the world's high traffic sites are powered by WordPress. The fact it is an Open Source platform and everyone has access to its Source Code makes it a tempting prey for hackers.
My first step is not one you have to take but I was helped by it. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And then I did before I even started my site, what I should have done. And here is where I want you to start. Learn hacked. The beautiful thing about secure your wordpress site and why so many people recommend because it is really easy to learn, it is. Unfortunately, that can also be a detriment to the health of our sites. We need to learn how to put in a security fence.
Don't make the mistake of thinking that your hosting official statement company will have your back as far as WordPress copies go. Not always. It has been my experience that the hosting company may or might not be doing backups while they say they do. Why take that kind of chance?
A snap to move - If, for some reason, you want to relocate your site, like a domain name change or a new web host, having your files at your fingertips can save you oodles of time, hassle, and the need for tech help.
WordPress is one of the most popular platforms for sites and self-hosted sites. While WordPress is pretty secure from the box, there are advice always going to be individuals who want to create trouble by finding a way to crack into accounts or sites to cause harm or inject hidden spammy links. That is why it's important to make certain that your WordPress installation is as safe as possible.
I prefer to use a WordPress plugin to get the work done. Make sure is able to do copies, has restore and can replicate. Also be sure that it is frequently updated to keep pace. There is no use in backing up your data to a plugin that is out of date, and not functioning.