Allow me to shoot a couple of scare tactics your way since scare tactics seem to be what drives some people to take repair hacked wordpress site a bit more seriously, or at the very least start considering the problem.
The one I recommend, and the more powerful approach, is to use one of the creation and storage plugins available on your browser. I Click Here think after a free trial period, you need to pay for it, although RoboForm is liked by people. I use the free version of Lastpass, and I recommend it for those of you who click to find out more use Firefox or Internet Explorer. That will generate secure passwords for you.
This is quite handy plugin, protecting you against brute-force password-crack attacks. It keeps track of the IP address of every failed login attempt. You can configure the plugin to disable login attempts when a official website certain number of attempts is reached.
WordPress is one of the platforms for sites and sites. While WordPress is pretty secure from the box, there are always going to be people who wish to create trouble by finding a way to split into sites or accounts to cause harm or inject hidden spammy links. That is why it's essential to be certain that your WordPress installation is as secure as possible.
Do not use wp_. Web hosting providers are eliminating that default but if yours doesn't, adjust wp_ to anything but that.