fix wordpress malware scanner will even tell you that there is not any htaccess from the wp-admin/ directory. You may put a.htaccess file if you wish, and you can use it to control access by IP address to the directory or address range. Details of how to do that are readily available on the net.
Is also significant. You want see post to backup all the files and database so in case of a sudden attack, you can easily bring back your blog like nothing happened.
Before you can delete the default admin account, you first need to create a new user. To do this go to your WordPress Dashboard and click on User -> Create New User. Enter all of the information you need to enter.
Another step to take to make WordPress more secure is to upgrade WordPress to the latest version. The main reason behind this is that there also come fixes for security holes that are old which makes it essential to update early.
However, I recommend that you install the Login LockDown plugin in place of any.htaccess controls. From being permitted after three failed login attempts from a certain IP address for one hour, see this login requests will stop. If you do so, you can access your admin panel whilst away from your workplace, and yet you still have good protection against hackers.