If you have to enable an admin account, don’t call it “admin” or any of the other 5,000+ names on this list.

Also, keys > passwords.

https://github.com/nik282000/DontUseTheseNames/blob/main/UIDList_Count.csv