Ultimately, how to fix hacked wordpress site will also inform you that there is not any htaccess within the directory. You may place a.htaccess record into this directory if you want, and you can use it to manage usage of the wp-admin directory by Ip Address address or address range. Details of how you can do that are plentiful around the internet.
There are many ways to pull this off, and a lot click resources of them involve re-establishing more and databases and FTPing files, exporting and copying. Some of them are very complex, so it is important that you go for the best one. If you're not of the technical persuasion, then you might want to look into using a plugin for WordPress backups.
Keeping your WordPress site up-to-date is one of the easiest things you can do. For the past couple of versions, WordPress has included the ability to install automatic updates. A new update becomes available.
You can also make a firewall that blocks hackers. The hacker is prevented by the firewall from coming into your files. You also have to have version of Apache. Upgrade your PHP also. It is important that your system is filled with upgrades.
You do think about needing security, when your site is new but you do need to protect yourself and your investment. Having a site go down and not having the ability to restore it can mean a loss of customers who won't remember to look for your site later and can not find you. Don't let that happen to you. Back up your site after you get it started, as the site is operational, and schedule backups for as long. That way, you will have peace and WordPress security of mind.