Rename wp-login.php vs Wordfence Security
Compare WordPress plugins and tools side by side. Pick products with “Compare” in the software directory.
| Feature | Rename wp-login.php v2.6.0 · checked 23 Oct 2026 Free Visit Details | Wordfence Security v9.0.2 · checked 23 Oct 2026 Free + paid · ★ 4.7/5 Visit Details |
|---|---|---|
| At a glance | ||
| Active installs | — | 5M+ |
| Last updated | — | September 30, 2026 |
| Editions | Rename wp-login.php | Wordfence Security · Wordfence Premium ($) |
| Pros | No core file changes and no rewrite rules added; Deactivating the plugin restores the default login behaviour; Works on multisite with a network-wide default slug | Firewall, malware scanner, 2FA and passkey login in the free version; Scanner checks core, theme and plugin files against WordPress.org; Dashboard for scan results, blocking and login settings |
| Cons | Hides the login URL only; it is not brute-force protection; Page caches must exclude the new login URL; No support forum; support is through GitHub | Free version receives firewall and malware signature updates 30 days late; Audit log and real-time threat updates need Premium; Scans and firewall add work on the server |
| Mentioned in our posts | — | 3 |
| Features (Security plugins checklist) | ||
| Firewall | — | Yes |
| Malware scan | — | Yes |
| Login protection | — | Yes |
| Two-factor login | — | Yes |
| Activity log | — | Paid |
| Free version | — | Yes |
| More features | ||
| Other features | Custom login URL slug, Network-wide default login slug, Blocks direct wp-login.php access, Rejects reserved and wp-login slugs, Disables wp-signup and wp-activate on single sites, Admin notice with the new login URL | Real-time malware signature and scan frequency options ($), Passkey sign-in, Security audit log ($), WooCommerce customer registration filter |
| Integrations | ||
| E-commerce | — | WooCommerce |
| Requires WordPress | 5.2 | 4.7 |
| Requires PHP | — | 7.0 |
| Tested up to | 5.2 | 7.1 |
| Phones home | No | No |
| External services | — | noc1.wordfence.com, noc3.wordfence.com, www.wordfence.com, noc4.wordfence.com |