Hide wp-login.php login page and close wp-admin access to avoid hacker attacks and brute force.