WP Manifestindependent plugin directory
manifest / security / savedpixel-hidden-access

SavedPixel Hidden Access

Hide default WordPress login routes behind a private URL and reduce public access to login entry points.

by Byron Jacobs · github.com/savedpixel/savedpixel-hidden-access · website

7stars
7release downloads
0forks

Install

The author publishes release zips, so WP-CLI can install straight from GitHub:

wp plugin install https://github.com/savedpixel/savedpixel-hidden-access/releases/download/v1.0/savedpixel-hidden-access-1.0.zip

From the readme

SavedPixel Hidden Access Replace the default WordPress login entry points with a private URL and aggressively hide public access to the site. What It Does SavedPixel Hidden Access creates a private login slug and reroutes WordPress login, logout, lost-password, and registration URLs through that private entry point. It also blocks direct guest access to wp-login.php and /wp-admin/, hides anonymous REST access, disables XML-RPC, and blanks normal public frontend requests. Key Workflows - Generate and manage a private login slug from wp-admin. - Copy or open the current private login URL from the settings page. - Use the branded private login screen instead of the default wp-login.php route. - Reduce unauthenticated discovery of login and API entry points. Features - Private, configurable login slug generated on activation. - Rewrite-based login entry point that still loads the core WordPress login flow. - Direct guest requests to wp-login.php return a 404. - Guest probes to /wp-admin/ are blocked, while logged-in admin access, AJAX, cron, and allowed admin assets remain available. - Core WordPress login, logout, lost-password, registration, and siteurl() login references are

Read the full README on GitHub →

Releases

TagPublishedAssetDownloads
v1.0Mar 13, 2026savedpixel-hidden-access-1.0.zip7