Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/jahidbinsabit/hide-login-url/archive/refs/heads/main.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Hide wp-login.php behind a custom login URL. Blocks the default WordPress login page and stops brute-force bots that hammer wp-login.php / wp-admin.
Features
- Custom login slug — e.g.
yoursite.com/my-secret-doorinstead ofwp-login.php - Old URL blocked — direct hits to
wp-login.phpget a 404 (or redirect home) - Zero config — set the slug once, done
- Lightweight — no bloat, no tracking, no upsells
Installation
- Upload the plugin folder to
/wp-content/plugins/or install the ZIP via Plugins → Add New → Upload. - Activate Hide Login URL.
- Go to Settings → Hide Login URL and set your custom slug.
- Bookmark your new login URL — the old one stops working immediately.
Important: this hides the login page; it doesn't replace strong passwords, 2FA, or update hygiene. Use it as one layer of your security stack.
Requirements
- WordPress 5.0+
- PHP 7.4+
License
GPLv2 or later — same as WordPress.
Author
Md Jahid Bin Sabit — WordPress Security Specialist (jbsabit.com)