fix hacked wordpress Watch out form submissions. You can usethe data to be processed by Regexp . You can even define preloaded variables as type data in the kind of checkboxes, radiobuttons etc..
The more powerful approach, and the one I recommend, is to use one of the generation and storage plugins available for your browser. Lots of people like RoboForm, but I think after a free trial period, you need to pay for it. I use the free version of Lastpass, and I recommend it for those who use Internet Explorer or Firefox. That will generate secure passwords for you.
Maintain control of your assets - Nothing is worse than having your livelihood in the hands of someone else. Why take chances with something as important as your site?
Can you view that folder, what if you visit WP-Content/plugins? If so, upload that blank Index.html file inside that folder as well so people can not view what plugins you might have. Because even if your current version of WordPress is current, if you're using an old plugin or a plugin with a security hole, someone can use this to get access.
Whenever your website is new, you do consider needing image source security but you do have to protect your investment and yourself. Having a site go down and not having the ability to restore it quickly may mean a loss of customers who probably won't remember to search for your website again later and can not find you. Don't let this happen to you. Back your site up as soon as you get it started, as the site is operational and schedule backups for as long. That way, you'll have peace and WordPress security of mind.