By default, the newest version of WordPress is pretty secure. The development team of WordPress has considered anything which may have been added to any secure your wordpress site plugins. Before, WordPress did have holes but now most of them are stuffed up.
The approach, and the one I personally recommend, is to use one of the generation and storage plugins available for your browser. I believe after a trial period, you need to pay for it, although RoboForm is liked by Lots of people. I use the free version of Lastpass, and I recommend it for those of you who use Internet Explorer or Firefox. That will generate secure passwords for you; then you use one master password to log in.
A snap to move - If, for some reason, you need to relocate your website, such as a domain name change or a new web host, getting your files at your fingertips can save you oodles a knockout post of time, headache, and the demand for tech help.
WordPress is one of the most popular platforms for websites and self-hosted sites. While WordPress is pretty secure out of the box, there are always going to be people who wish to make trouble by finding a way to split into sites or accounts to cause damage or inject hidden spammy links. That's why it's important to be certain that your WordPress installation is as secure go to these guys as possible.
Software: If you've installed scripts that are free search Google for'wordpress security'. You'll get many tips.