WPS Hide Login

Plugin · Free

2M+ active installs · Rated 4.8/5 · Updated August 13, 2026

Visit website

Changes the login URL so wp-login.php and wp-admin are not reachable by default for logged-out visitors. It does not rename core files or add rewrite rules, and deactivating it restores the normal login. It suits site owners who want to reduce automated login attempts. It hides the URL rather than protecting it, so it should be paired with a limit on failed logins, and the new URL must be remembered.

Pros

  • Moves the login page to a custom URL with no core file changes
  • Restores the standard login when deactivated
  • Supports multisite network settings

Cons

  • Hiding the URL is not a substitute for login rate limiting
  • Forgotten login URLs lock editors out until the plugin is disabled
  • Maintained without guaranteed free support

Topics: Login plugins , Security plugins

Alternatives