October 15, 2017 654 Views 0 Comment

Securing WordPress Websites and Blogs – Hiding Your Login URL


One very important step in securing your WordPress website or blog is to change the default login url from the default /wp-login.php to something more generic.

Using A Plugin to Change WordPress Login URL

Using the WPS Hide Login plugin available at https://wordpress.org/plugins/wps-hide-login you can change your wordpress login url to anything you like. Simply download, upload and activate the plugin then goto Settings > General to insert your new login url.

Using the WPS Hide Login plugin to adjust your website’s login url is fast and easy. It can be quite useful in cases where you do not have server side access.


Using Code to Change WordPress Login URL

The wordpress default login url (http://your-site.com/wp-login.php) can be adjusted via the .htaccess file. This file can be found in the root of most if not all wordpress blogs and websites.

Insert the code below inside your .htaccess file, just above where the wordpress rules begin. This changes your login url from /wp-login.php to /letmein

# adjust wordpress login url
RewriteRule ^letmein$ http://your-site.com/wp-login.php [NC,L]


For more tips on Securing WordPress Websites and Blogs please checkout our other posts in the series.


More coming soon!
Leave us a comment if you are having issues securing your wordpress website or blog and need on advice on remeding the situation.