Cloning your website is just another level in fix wordpress malware which can be useful. Cloning simply means that you've backed up your website to a completely different location, (offline, as in a folder, in order to not have SEO issues ) where you can get it at a moment's notice if necessary.
The stronger approach, and the one I personally recommend, is to use one of the creation and storage plugins available on your browser. I believe after a trial period, you have to pay for it, although people like RoboForm. I use the free version of Lastpass, and I recommend it for those of you who use Internet Explorer or Firefox. That will generate secure passwords for you; you use one master password to log in.
You need to create a user with administrator rights, before you can delete the default admin account. To do this go to your WordPress Dashboard and click on User -> Create New User. Then enter all of the information you will need to enter.
Safety browse around here plug-ins can be thought of as a security checker. They scan and check the site and give you information about the weaknesses of the website.
You do not always consider needing security when your site is new but you do have to protect your investment and yourself. Having a site go down and not being able to restore it can mean a loss of consumers who won't remember to search for your site later and can't find you. Don't let that happen to you. Back your site up as soon as you get it started, as the website is resource operational and schedule regular backups for find as long. That way, you will have peace and WordPress security of mind.