If your admin username is ‘admin’, change it. Even better, don’t have ‘admin’ as your admin name from the start. Straightaway this will add a layer of security to your site. Bots and scripts will then have to discover your username before they begin to guess your password. Brute force attempts at accessing your site