Okay, you got me: WordPress security isn't the sexiest way to spend your time, but it could end up being one of the most profitable! Nothing is more caustic to the lining of your stomach than having your site go down, and wondering whether or not you've lost it all.
Finally, installing the secure your wordpress website Scan plugin alert you that you may have missed, and will check all this for you. Additionally, it will inform you that a user named"admin" exists. Needless to say, that is the user name. You can follow a link and find directions for changing that title, if you desire. Personally, I think that a password is good enough protection, and because I followed those steps, there have been no successful attacks on the sites that I run.
Should your site's server go down, everything you've worked for will proceed with this. You will make no sales, get signups or no visitors to your visit site site, and in short, you're out of business until you get the site back up again.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. If you make changes and additions to your site, definitely more. If you have a community of people which are in there all the time, or make changes multiple times every day, a backup should be a minimum.
You may extend the plugin features with premium news plugins like: Amazon S3 plugin, Members only plugin, DropShop etc.. I think this plugin is a fantastic option and you can use it.
Just ensure you choose a plugin that is current with the current version and release of WordPress, and that you may schedule, restore and replicate.