It's also important to change your password and admin username if someone helps you with your site and needs your password and admin username to login to do the job. After all the work is complete, IMMEDIATELY change your password and admin username. Someone in their business may not be even if the person is trustworthy. Better to be safe than sorry!
In addition to the graphics and text you're creating, you're going to need a protection and backup option for your website. fix hacked wordpress is very important, and if you do not protect and back up your site you could lose data and information which may be very hard to restore. You don't want to need to start over from scratch once you've done all that work, so make sure you're secure.
The one I recommend, and the approach, is to use one of the creation and storage plugins use this link available on your browser. I believe after a trial period, you need to pay for it, although RoboForm is liked by many people. I use the free version of Lastpass, and I recommend it for those who use Internet Explorer or Firefox. That will generate passwords for you; you use one master password to log in.
Maintain control of your assets that are online - Nothing is worse than getting your livelihood in the hands of someone else. Why take chances with something as important as your website?
Along with adding a secret key to your wp-config.php document, also think about altering your user password into something that is strong and unique. A good tip is to avoid phrases, use upper and lowercase this hyperlink letters, and include numbers, although you will be told the strength of your password by wordPress. It's also a good idea to change your password frequently - say once.
Software: If you have installed scripts that are free like Wordpress, search Google for'wordpress security'. You'll get many tips on the best way best to create your WP blog secure.