TechnologyWisdom Secure Login Path lets you change the default WordPress login URL (wp-login.php) and restrict direct access to wp-admin by replacing it with a custom slug of your choice, improving security by reducing exposure to brute-force attacks and automated bots. The plugin is lightweight, ea
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 5.0 and PHP 7.4.
SourceWordPress plugins · Oct 20, 2026
01 / Source details
About this tool.
TechnologyWisdom Secure Login Path lets you change the default WordPress login URL (wp-login.php) and restrict direct access to wp-admin by replacing it with a custom slug of your choice, improving security by reducing exposure to brute-force attacks and automated bots. The plugin is lightweight, easy to configure, and does not modify any core WordPress files, ensuring safe updates and broad compatibility with themes and plugins, while also offering a cleaner and more branded login experience for administrators.
Features
Set a custom login URL slug to replace the default WordPress login page
Block direct access to wp-login.php to reduce unauthorized login attempts
Restrict or protect access to wp-admin for improved backend security
Secure logout handling to ensure sessions are properly terminated
Fully compatible with native WordPress authentication system
Safe redirect validation to prevent open redirect vulnerabilities
Upgrade to TW Security Toolkit
Need more advanced WordPress login hardening and security monitoring features?
TW Secure Login Path is also available as part of the premium TW Security Toolkit. The Security Toolkit brings login hardening, content workflow controls, file protection, and security monitoring into one admin menu — all without custom development.
Premium Features Include
Secure Login Path with a custom login URL
Upload Guard with role-based file size, type, and dimension limits
Login Alert & Tracker with last-login tracking and email alerts
Disable File Editor to block theme and plugin editors
Post Modifier Tracker showing who last edited content
Link Expiration by date and/or click count
CPT Revisions control per custom post type
Post Approval Notifier with optional draft hold-for-approval
Two-Factor Authentication (email OTP) and role policies
Login History by User with advanced filters
Email, Slack & Discord security notifications
Scheduled Security Reports (daily, weekly, or monthly)
Suspicious Activity Detection & Alerts
Security Health Check with recommendations
File Change Detection for important WordPress files
Whether you are hardening login access, protecting uploads and file editors, managing content approvals, or monitoring suspicious activity, TW Security Toolkit provides the tools needed to secure and oversee your WordPress site from a single plugin.
Upgrade to TW Security Toolkit and unlock a complete set of WordPress security features designed for growing websites and teams.
For full Premium details, pricing, and feature comparison, visit the TW Security Toolkit .
Privacy / External Service
This plugin can optionally connect to an external support service operated by Technology Wisdom.
The service is used to provide in-plugin support messaging, feedback forwarding, announcements, and connection status for opted-in sites.
Opt-in consent (required before any connection):
When you activate the plugin, an admin notice asks whether you want to allow the support connection. You can choose Allow Support Connection or No Thanks .
If you allow the connection, the plugin may send: site URL, site name, admin email, plugin name/version, WordPress version, and PHP version. Support requests and review/feedback details are sent only when you submit those forms. The plugin may also check weekly for announcements from Technology Wisdom.
While the connection is enabled, the plugin may also report a connection status to the portal so we can tell whether the site is Active , Deactivated , Disconnected , or Deleted . Status is only sent after you opt in.
If you decline (or never accept), that data is not sent to the support portal. The plugin’s core feature continues to work normally without the connection.
You are never required to allow the connection to use the plugin.
You can disconnect the support connection at any time from the plugin’s Support page by choosing Disable priority support . After you disconnect, the plugin stops sending status updates, support traffic, and announcement checks.
Support and rating forms also include their own consent checkboxes before site information is included with a submission.
Please review the service Terms of Use and Privacy Policy before enabling the connection.
License
This plugin is licensed under the GPL-2.0+ License. You can freely use, modify, and distribute it under the terms of this license. Full license: https://opensource.org/licenses/GPL-2.0
See it in action
Screenshots & previews.
Screenshot 1: Settings page to configure the custom login URL and redirection behavior.Screenshot 2: Provides helpful guidance and usage instructions for the plugin.
02 / Source details
Getting started.
01Upload the plugin to /wp-content/plugins/
02Activate the plugin through the ‘Plugins’ menu in WordPress
03Go to Settings → Secure Login Path
04Set your custom login slug
05Save settings
03 / Source details
Frequently asked questions.
What does this plugin do?
This plugin hides the default WordPress login URL and allows administrators to use a custom login slug for improved security.
Does this plugin improve WordPress security?
Yes. It helps reduce brute-force login attempts and automated bot attacks by hiding the default login page.
Can I customize the login URL?
Yes. You can set any custom slug such as: yourwebsite.com/my-login instead of: yourwebsite.com/wp-login.php
What happens to wp-login.php?
The plugin blocks direct access to wp-login.php and can either show a 404 page or redirect visitors depending on your settings.
Will this plugin affect the WordPress admin area?
No. Logged-in users can still access the WordPress admin dashboard normally.
Can users still reset their passwords?
Yes. Lost password and password reset functionality continue to work properly.
Does this plugin work with caching plugins?
Yes. After changing the login slug, you should clear your website cache and resave permalinks.
What should I do after changing the login URL?
Go to: Settings → Permalinks and click “Save Changes” to refresh WordPress rewrite rules.
What if I forget my login URL?
Deactivate the plugin via FTP or File Manager by renaming the plugin folder, then login normally and reactivate the plugin.
Does this plugin replace WordPress authentication?
No. It uses the native WordPress login system internally.
What happens if I deactivate the plugin?
Your website automatically returns to the default WordPress login URL: /wp-login.php
Does this plugin require coding knowledge?
No. Everything can be configured directly from the WordPress admin panel.
Website LLMs.txt and LLMs-Full.txt Generator is an LLMs.txt generator and llms-full.txt generator for WordPress. It helps site owners generate, manage, preview, validate, and serve AI discovery files from published public content. Use it to create structured /llms.txt and optional /llms-full.txt end
EngageDock AI is a customizable floating contact widget for WordPress websites that want more leads and faster visitor communication. It helps small businesses turn website traffic into calls, texts, emails, and callback requests from one clean contact panel. Key Features: Click-to-Call – One tap ca
Altify AI is an auto ALT text and AI ALT text plugin for WordPress images. It helps generate descriptive image ALT text for accessibility and image SEO. Use bulk image ALT text tools for your Media Library, generate featured image ALT text automatically, and scale WooCommerce image ALT updates with
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
