Keep headers/logos under 125 pixels high. It takes up valuable viewing space, especially for laptop users, that is best left for the good stuff to appear"above the fold." Take a cue from the big companies, simple logos done well say it all. This is our #1 pet peeve - screaming logos and headers!
Cloning your site is another degree in fix wordpress malware removal that may be useful. Cloning simply means that you have backed up your website to a completely different place, (offline, as in a folder, in order to not have SEO problems) where you can access it at a moment's notice if the need arises.
The more powerful approach, and the one I recommend, is to use one of the generation and storage plugins available on your browser. Many people like RoboForm, but I believe after a free trial period, you have to pay for it. I use the free version of site here Lastpass, and I recommend it for those who use Firefox or Internet Explorer. That will generate passwords for you.
Luckily, keeping your WordPress website up-to-date is one of the most easy things you can do. For the past couple of versions, the ability to install updates has been included by WordPress. A new update becomes available.
WordPress is one of the most popular platforms for sites and sites. While WordPress is pretty secure from the box, there are always going to be people who wish to create trouble by finding a way to crack into sites or accounts to cause damage or inject hidden spammy links. That's why it's important to be sure that your WordPress installation is as safe as possible.
Implementing all of the above will probably take less than an hour to complete, while making your WordPress site more resistant to intrusions. Websites were cracked this past year, largely due to easily preventable security gaps. Have yourself prepared and you're likely to be on the safe side.