Finally, how to fix hacked wordpress site will also tell you that there is not any htaccess in the directory. You can put a.htaccess file if you wish, and you can use it to control access from IP address to the directory or address range. Details of how to do that are easily available on the net.
Use strong passwords - Get the facts Do what you can to use a password, alpha-numeric, with upper and lower case and special characters. Easy to remember passwords are easy to guess!
In case you ever wish to migrate your website elsewhere, such as a new web host, you'd be able to pull this off without a hitch, and also without needing to disturb your old site until the new one was in place and ready to roll.
As I (our fictitious Joe the Hacker) understand, people have way too many usernames and passwords to remember. You've got Twitter, Facebook, your online banking, LinkedIn, two site logins, FTP, web hosting, etc. accounts which all come with logins and passwords you will need to remember.
Just make sure that you can schedule, and you choose a plugin that is up to date with release and the current version of WordPress, restore and replicate.