If you do not have good protection on your website Documents can easily get lost. Some of those files might be stored in your computer and easily replaceable, but what about the rest of them? If you lose them the first time, where are you going to get them out of again? For sites that have been in operation for quite a very long time, fix malware problem is vital. Often sites have created a high number of files and have a lot of data. Recreating that all are a nightmare, and not something any business owner would like to do.
The approach, and the one I recommend, is to use one of the password generation and storage plugins available on your browser. I think after a trial period, you need to pay for it, although many people like RoboForm. I use the free version of Lastpass, and I recommend it for those of you who use Firefox or Internet Explorer. That will generate passwords for you.
For me it's a WordPress plugin. They're drop dead simple to set up, have all the functions you need for a task such as this, and are relatively cheap, especially when compared to having to hire someone to get this done for you.
You can extend the plugin features with premium plugins like: Amazon S3 plugin, Members only plugin, DropShop etc.. I think this plugin is a good choice and you can use it.
Do your homework and some hunting, but if you're pressed for time and want to get this done once and for all, try the WordPress security plugin that I use. It's a relief to know that additional hints my website (and company!) are secure.