Many people have to grasp just how important it is for your own WordPress safety which you create backups of your site. This can and often does help WordPress website owners avoid the mind-numbing pain of having your website disappear. Let's look at a few ways to prevent this doomsday scenario!
I back up my blogs using a plugin WP DB Backup. I can restore my website if anything happens. I use my site to be scanned by WP Security Scan plugin and requests to be blocked by WordPress Firewall to fix wordpress malware protection.
There are ways to pull this off, and a lot involve re-establishing much more and databases and FTPing files, exporting and copying. Some of them are very complicated, so it is imperative that you select the best one. If you are not of the persuasion, then you might want to check into using a plugin for WordPress backups.
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. Definitely more if you make additions and changes to your website. If you read more have a community of people that are in there all the time, or make changes multiple times a day, a daily backup should be a minimum.
Along with adding a secret key to your wp-config.php document, also think about changing your user password to something that is strong and unique. WordPress will tell you the strength of your password, but include amounts, use upper and lowercase letters, and a good tip is to avoid common phrases. It's also a good idea to change your password regularly - say once.
The plugin should be updated play nice with your other plugins to remain current with the latest WordPress release and have WordPress cloning and restore capabilities. The ability to clone your site (in addition to regular backups) can be helpful if you ever need to do an offline website redesign, among other things.