Hiding your WordPress login URL is an excellent way to vastly increase the security of your site, especially from brute force attacks. In this article, we will show you how to effectively and easily change your WordPress admin URL with just a few clicks.
Hiding your WordPress Admin URL
- First, log in to your WordPress admin dashboard.
- You will need to have iThemes Security installed and activated. If you do not, you may follow our article on installing iThemes Security.
- Within your WordPress admin, hover over Security on the left side menu, and click on Settings.
- The settings can be filtered as Recommended and Advanced if all of them are not showing. You’ll see the filter options in the top right corner of the listed settings. Click on Advanced.
- Find Hide Backend and then click on Configure Settings.
- After enabling the checkbox in the previous step, you will see options appear that allow you to configure how your login URL will be set. In the Login Slug field, enter your new login location.
- After enabling the checkbox in the previous step, additional options will appear. In the Login Slug field, enter your new login location. Make sure that you record this setting or set a bookmark to it. If you forget your new login URL, then you won’t be able to login to your site.
- You will see other options, but for simplicity leave the defaults for Enable Redirection and Redirection Slug as they are. You can change the redirection slug if you feel it’s needed, but the Enable Redirection should be checked to prevent error messages.
- Once your changes have been made, click Save Settings in the bottom lefthand corner.
Now that you have hidden your login URL with iThemes Security, your site login URL will be harder to locate, and thus make it more secure from brute force attacks. Note: As a reminder, be sure to remember what you set in the Login Slug field as, without it, you will not be able to log into your WordPress admin dashboard.
can this be accomplished by simply editing the wpconfig file or do i need to instal ANOTHER plugin?
Hi Dave,
Thanks for your question. Unfortunately, changing the WordPress Admin URL does require the use of a plugin. Changing it in the wp-config.php file would likely result in errors or malfunctioning features.
Best Regards,
Alyssa K.
Do you know where this setting is save? Can no longer get into my website. I looked through .htaccess and wp_config, and database but I am a bit lost. Changed my website to wplogin, but I get not found.
Hi Paul,
It should be located in the wp-config.php file, likely labeled as the “ADMINURL” or something similar.
Best Regards,
Alyssa K.
Wrong guidance.
There isn’t any Hide Login Area.
Thanks for your comment. This article is a little out of date. The section itself is now called “Hide Backend”. And from there, you can enable the Hide Backend feature.
Hi,
I have tried to hide my admin url. Now on that hidden url I am getting 500(internal server error) due to missconfiguration but I really dont know what is going wrong in config)
Would you please help me?
We need more information like what is your domain name. 500 errors are general in nature, and really just means the server doesn’t know what to do. Can you provide us the domain name?
ok, solved: it seems that itsec plugin has not written anything in my htaccess file…
with manual edit the old address is now correctly unreachable.
Hi, I’ve a strange issue.
My changed login slut is, for example, /fabio, where fabio is also my nickname for the admin account.
Now, because of some brute force attacks, I decided to change /fabio in, for example /fabionew. So I saved correctly.
Now I see the login mask in …./fabio AND in …./fabionew
Why? I don’t want /fabio anymore…how can I hide the old slug?
Thanks. I used the setting “hide backend” and haven’t had any issues so far.
Hi, thanks for the article. Does my .htaccess file need to have a certain CHMOD value for it to be able to work? It’s currently set to 644. Is that enough permission for iThemes to write to it?
That should be fine for iThemes to write to it.
please i cant find login area in the settings. new features added. please help me out.
Hello Adeola,
iThemes Security is a third party plugin that my have updated and changed from the version that is being listed in this article. Our apologies if there is any confusion. Please reference the iThemes Security documentation for specific directions if you are unable to use the directions above for your current installation.
If you have any further questions or comments, please let us know.
Regards,
Arnel C.
“Step 6. After enabling the checkbox in the previous step, additional options will appear. In the Login Slugfield, enter your new login location.” How does one know where to locate the new login?
Hello Gwen,
What ever you change the slug to would be your new login page such as in the example it would be https://example.com/wplogin
Best Regards,
TJ Edens