So, you have a new website with a content management system (CMS) like Wordpress. Like many of us, remembering a slew of passwords for different applications is time-consuming and frustrating, so you opt for something simple, say "4321".
A week after your website launches, a visitor to your site calls you and says that they were trying to get to your website, but were being redirected to an adult rated site that installed malicious software on their computer. In a panic, you try to log into your CMS, but can't, as the hackers have blocked you out. Finally, you contact your web host for help. Unfortunately, your web host doesn't conduct routine backups of your site's content or database. The only thing that can be done is to wipe those files from their server and start from scratch.
Not only do you need to start from scratch, but there is the possibility of having your domain blacklisted by Google or other search engines, which would effectively ruin your presence on the web and would take some time to reestablish.
How can you prevent this? Here are a few steps you can take:
1. Use Strong Passwords
2. Keep Your CMS Up-to-Date
3. Use Web Security Software
4. Limit User Access to Admin Portion of Your Site
5. Enable SSL Access to Admin Portion of Your Site