When I was in college, one of my business instructors told us students that one of the biggest hurdles to making money in business was procrastination.
In my opinion, the best way to ensure your fix wordpress malware protection that is is through the use of a WordPress backup plugin. This is a relatively inexpensive, easy and elegant to use way to be certain your site is available to you.
The one I recommend, and the approach, is to use one of the password creation and storage plugins available on your browser. RoboForm is liked by Lots of people, but I believe after a free trial period, you have to pay for it. I use the free version of Lastpass, and I recommend it for those who use Internet Explorer or Firefox. That will generate passwords for you.
Exclude pages - This plugin provides a checkbox,"include this page in menus", which is checked by default. If you uncheck it, the click resources page will not appear in any listings of webpages (which includes, and is usually restricted to, your page navigation menus).
Make a note of your password for the next time you sign in! I recommend the paid or free version of the software that is protected *Roboform* to remember your passwords.
However, I recommend that you set up the Login LockDown plugin instead of any.htaccess controls. From being permitted after three failed login attempts from a certain IP address for an hour login requests will stop. You may still access your panel while and yet you have good protection against hackers, if you do that.