“admin” user and security

In theory if you have a good password no harm in leaving admin. But then again, it won’t hurt to do as you are suggesting either?

Well, if you rename it, it’s one thing less for an attacker to guess, isn’t it? But what do you rename it to?

How do you rename admin?

Edit the users table through a MySQL client tool. If you don’t know your way around with SQL syntax, perhaps install phpmyadmin.

Or create a new user with the Administrator role, login as that new user, delete the old admin.