plugin-icon

Secure Login Shield

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.
Rating
5/5
Version
1.3.0
Last updated
Sep 20, 2025
Secure Login Shield

Secure Login Shield helps you lock down your WordPress login page. By default, WordPress exposes /wp-login.php and /wp-admin/. Bots hammer these URLs every day.

This plugin gives you a private login slug (e.g. /dragon-lair) and hides the default login endpoint:

  • Defaults to /wp-login.php until you change it.
  • Once changed, only your custom slug works.
  • Direct access to /wp-login.php shows a 404 Not Found (stealth mode).
  • Logged-out visitors hitting /wp-admin/ are redirected to the homepage.
  • Deactivate the plugin everything reverts to normal.

Made with ❤️ by Ben Treder

Features

  • Private login slug (e.g. /dragon-lair, /control-center, /secret-gate)
  • Stealth 404 protection: Bots hitting /wp-login.php see “Not Found”
  • Homepage redirect: /wp-admin/ (logged out) homepage
  • Easy settings page under Settings Secure Login Shield
  • Safe activation/deactivation: no core hacks, auto-reverts when disabled

Contribute & Support

Freeon Business plan
Tested up to
WordPress 6.8.3
This plugin is available for download for your site.