SavedPixel Hidden Access
Hide default WordPress login routes behind a private URL and reduce public access to login entry points.
by Byron Jacobs · github.com/savedpixel/savedpixel-hidden-access · website
★ 7stars
7release downloads
0forks
Install
The author publishes release zips, so WP-CLI can install straight from GitHub:
wp plugin install https://github.com/savedpixel/savedpixel-hidden-access/releases/download/v1.0/savedpixel-hidden-access-1.0.zipFrom the readme
SavedPixel Hidden Access
Replace the default WordPress login entry points with a private URL and aggressively hide public access to the site.
What It Does
SavedPixel Hidden Access creates a private login slug and reroutes WordPress login, logout, lost-password, and registration URLs through that private entry point. It also blocks direct guest access to wp-login.php and /wp-admin/, hides anonymous REST access, disables XML-RPC, and blanks normal public frontend requests.
Key Workflows
- Generate and manage a private login slug from wp-admin.
- Copy or open the current private login URL from the settings page.
- Use the branded private login screen instead of the default wp-login.php route.
- Reduce unauthenticated discovery of login and API entry points.
Features
- Private, configurable login slug generated on activation.
- Rewrite-based login entry point that still loads the core WordPress login flow.
- Direct guest requests to wp-login.php return a 404.
- Guest probes to /wp-admin/ are blocked, while logged-in admin access, AJAX, cron, and allowed admin assets remain available.
- Core WordPress login, logout, lost-password, registration, and siteurl() login references are
Read the full README on GitHub →
Releases
| Tag | Published | Asset | Downloads |
|---|---|---|---|
| v1.0 | Mar 13, 2026 | savedpixel-hidden-access-1.0.zip | 7 |