Rename wp-login.php

Plugin · Free

Visit website

Moves the WordPress login page to a custom URL slug by intercepting requests, without editing core files or adding rewrite rules. Suits sites that want to hide the default wp-login.php from casual bots. Deactivating it restores the default login. It is obscurity rather than real protection, and the old URL stops working.

Pros

  • No core file changes and no rewrite rules added
  • Deactivating the plugin restores the default login behaviour
  • Works on multisite with a network-wide default slug

Cons

  • Hides the login URL only; it is not brute-force protection
  • Page caches must exclude the new login URL
  • No support forum; support is through GitHub

Topics: Login plugins , Security plugins

Alternatives