Hide WordPress Login Page feature is a part of the Login Guard module. It hides your wp-login.php page from brute force attacks and hacking attempts - if your login page cannot be found, no-one can login.


Important: This is not required for complete security and if your site has irregular or inconsistent configuration it might not work for you. To find out what behavior you may expect, read the article here.

How to hide your WordPress login page

Simply supply a string of text (only letters and numbers are permitted) and this will immediately become your new login URL.


Example

Your current login page URL is "www.example.com".


If you rename it to the "secureurltest", then your new login URL will be: "www.example.com/secureurltest".

Remember: The only way to access your WordPress login page is through the new URL you have created.


Note: This will not rename the original wp-login.php file. Also, this original file will not and can't be deleted.


You cannot delete the wp-login.php file, as Shield includes this file when a visitor attempts to access the "new" login URL. When a visitor attempts to access the original login URL directly, Shield will intercept the request and block it, presenting a pseudo-404 response as if the file doesn't exist.

To test it, you can login into your site on 1 web browser, and temporarily change the login URL. You won't be logged out.

You can then use a different web browser to try and access the old and new URLs to see how they work for you. If you don't like how it functions, you can use your original browser to turn off the feature.


For more information on how to use Hide WordPress Login Page feature, read the article here.


We also recommend you to read our blog article here.