Cloning your website is another degree in fix wordpress malware removal that can be very useful. Cloning simply means that you have backed up your site to a completely different place, (offline, as in a folder, in order to not have SEO issues ) where you can get it at a moment's notice if necessary.
If you're one of the ones that are proactive, I might find it a little harder to crack your password. But if you're among the responsive ones, I might get you.
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. Definitely, if you make changes and regular additions to your website. If you make changes multiple times every day, or have a community of people which are in there all the time, a backup should be a minimum.
Another step to take to make WordPress secure is to upgrade WordPress to the latest version. The main reason behind this is that with every upgrade hop over to these guys there come fixes for security holes that are older which makes it essential to upgrade.
I prefer to use a WordPress plugin to get the work done. Make sure is in a position to do backups that are select, has restore performance, and can replicate. Be sure it is frequently updated to keep pace. There is no use in backing up your data and published here not working.