In reply to greencharley.

In WordPress usernames are not considered private data. I'd suggest using something besides 'admin' as the username, but that shouldn't be considered in the same category as having a strong password.

A slightly smarter bot will simply scrape the username from the front of the site.