Protected administration
Five failed attempts trigger a 15-minute lockout. Use a unique password and protect the owner email account with MFA.