Assigning roles (admin, editor) and resetting passwords.
Use a firewall to limit login attempts, automatically blocking IPs that trigger multiple failed authentication errors.