By default, the latest version of WordPress is pretty secure. The development team of WordPress has considered anything which may have been added to some fix wordpress malware attack plugins. In the past , WordPress did have holes but most of them are stuffed up.
The stronger approach, and the one I recommend, is to use one of the generation and storage plugins available on your browser. RoboForm is liked by Lots of people, but I believe after a trial period, you have to pay for it. I use the free version of Lastpass, and I recommend it for those of you who use Internet Explorer or Firefox. That will generate secure passwords for you; then you use one master password to log in.
I don't think there's a person out there that after learning just how much of a problem WordPress hacking is that it's a fantastic idea. But something I've noticed over the years is that when it comes to securing their sites, bloggers go to my blog seem to be stuck in this state.
BACK UP your site frequently and keep a copy on your own computer and off-site storage. Back if you have a site. You spend a whole lot of money and time on your website, don't skip this! Is BackupBuddy, no back up database, widgets, plugins and your files. Need to move your site to another server, this will do it in less than a couple of minutes!
Just make sure that you may schedule, and you choose a plugin that's current with release and the current version of WordPress, restore and replicate.