Cloning your website is just another level in fix hacked wordpress that may be very useful. Cloning simply means that you've backed up your website to a totally different location, (offline, as in a folder, so as to not have SEO issues ) where you can access it in a moment's notice if the need arises.
I protect an access to important files on the blog's server by putting an index.html file in the particular directory, that hides the files from public view.
There's a section of config-sample.php that is headed"Authentication Unique Keys." There useful reference are. There is a hyperlink inside that section of code. You need to enter that link in your browser, copy the contents that you return, and replace the Website keys you have with the unique, pseudo-random keys offered by the site. This makes it harder for attackers to automatically create a"logged-in" cookie for your site.
You may extend the plugin features with premium plugins such as: visit the website Amazon S3 plugin, Members only plugin, DropShop etc.. So I think this plugin is a good choice and you can use it.
Utilizing a plugin for WordPress security just makes great sense. Backups need to be carried out on a regular basis. Do not become a victim of not being proactive because!