Admin Account Security Best Practices?

If someone is trying to brute force into your account, it will most probably ban their IP address and not really your account IIRC.

Using 2FA will surely help a lot as it deters the malicious actors a lot.

if You’re using a static IP on your home network you may be able to whitelist your own IP address so you don’t get locked out.

Using a very long password is also fairly good measure at deterring the brute force.