Default admin account login

[Philip Scutt]

We've recently had multiple unsuccessful attempts to login to our production instance using the System Administrator account - login ID "admin".  Has anyone successfully changed their System Administration login ID to something other than "admin" to reduce the risk and did you have any issues?

We've got a P2 case open with Now Support who are looking into this and supporting with the targeted attack but wondering if anyone has already done this.

[Kieran3]

Hi @Philip Scutt,

I would recommend setting up MFA on the System Administrator account and having it in a way that all approved admins can access it. This helps reduce the risk of a successful attack. Whilst I know that's not what you asked, it will reduce that threat significantly.