copona
Admin login security multiple protections
OC2 is planning to have 2-stop authentication. At the moment, we can implement token login at least, to protect from brute-force.
Something from here: https://github.com/opencart/opencart/issues/5286 and https://github.com/opencart/opencart/issues/5285 (as a reason)
One way to increase security is to leave the dynamic admin path. I think it's really cool hehe tool https://getclef.com/
I think you can install a 2-step but leave this part flexible, so that the developer can more easily implement an extension that increases the security in any way he wants.
Clef will stop working on June 6, 2017
But 2-stop auth is something nice to have in the future.
"Clef will stop working on June 6, 2017" - sad On the dynamic path of admin, would have to reshape the routes part.