Change the default login URL

By default, the WordPress admin page can be accessed by visiting the wp-admin directory in your web browser i.e. https://yourdomain.com/wp-admin. There are bots and scripts out there that scans for this common URL. Hence, changing the default URL to a new unique URL can mitigate the number of brute-force attacks. Only those who know the URL can access the admin page.