Protect WordPress login (wp-admin): rename wp-login

Learn how you can significantly improve the security of your WordPress Web site in minutes by changing the login URL to the administration area of your WordPress Web site.

The administration area of a WordPress website (WordPress Admin) can be accessed conveniently by default via .

Attackers also know this and use this path as an attack point for hacking attacks via brute force. If you want to protect yourself from these attacks, you can rename or hide this default path to your login URL.

With the right WordPress plugin this can be done in just a few minutes.

Managed WordPress Hosting with IONOS!

Start your website quickly and benefit from the most secure and up-to-date version of WordPress!

Free domain
24/7 support

Plugin recommendation: Rename wp.login.php

This free plugin is a bit older, but also works fine with current WordPress installations - we tested it with WordPress 4.8.2.

  • In your WordPress Admin, click Plugins > Install
  • Search for Rename wp-login.php
  • In the plugin tile, click Install Now and then click Activate after installation.

You can now adjust the login URL in the Settings > Permalinks area:

  • Scroll to the section Rename wp-login.php
  • Assign a new, secure name for the login URL, e.g.: c2xlp-3

Security tip: Do not use names for the login URL like login, logon, admin or backend. These are also known to hackers and offer little protection.

  • Click Apply Changes.

In the future you can reach your WordPress-Admin under the new URL. In this example:

Save changes to .htaccess file (if required)

In certain cases, if your .htaccess file is not writable, you may need to manually insert these mod_rewrite rules into your .htaccess file:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

Alternative Plugins

You can also use plugins like Protect your Admin to protect the login URL of your WordPress admin.

Wait! We’ve got something for you!
Have a look at our great prices for different domain extensions.

Enter the web address of your choice in the search bar to check its availability.
$1/1st year
then $15/year
$1/1st year
then $15/year
$1.60/1st year
then $20/year
$1/1st year
then $25/year