A website needs protecting. A few simple habits go a long way towards reducing the risks.

The habits to build

• A strong, unique password for the administrator account.
• Update WordPress, your theme and your plugins regularly.
• Install a plugin that handles automatic backups.
• Avoid the far-too-obvious “admin” username.

Important: a recent backup is your guarantee that you can restore everything if something goes wrong.