I back my blogs using a plugin WP DB Backup up. If anything happens I can always restore my blog to the last settings. I use WP Security Scan plugin that is free to scan my site frequently and WordPress Firewall to block requests that are suspicious-looking to rename your login url to secure your wordpress website.
There are many ways to pull off this, and many involve re-establishing databases and much more and FTPing files, exporting and copying. Some of them are very complicated, so it is imperative that you go for the right one. If you're not of the persuasion, then you might want to look into using a plugin for WordPress backups.
Exclude pages - This plugin adds a checkbox,"include this page in menus", which is checked by default. If you uncheck it, the page will not appear in any listings of webpages (which contains, and is ordinarily restricted to, your webpage navigation menus).
As I (our untrue Joe the Hacker) know, people have far too many usernames and passwords to remember. You have got Twitter, Facebook, your online banking, LinkedIn, two site logins, FTP, web hosting, etc. accounts that all come with logins and passwords you will need to remember.
Implementing all of the above will probably take less than an hour to finish, while making your WordPress website more resistant to intrusions. Over 1 million WordPress sites were this past year, mainly due to preventable safety gaps. Have yourself prepared and you're likely to be on the more tips here safe side.