[mothered]

It's definitely a good security measure to change It from It's default state, to something not consistent with an admin login.

It's beyond the scope of this post to document It, so the following articles should be of help.

https://managewp.com/blog/change-your-wo...-login-url
https://themeisle.com/blog/change-wordpr...-page-url/
https://www.shoutmeloud.com/how-to-chang...n-url.html