Most automated scripts look for the default login URLs /wp-admin/ and wp-login.php.
With Security Ninja Pro you can rename the login path so those scripts have a harder time finding the form.
The setting is under Security Ninja → Login (Change login URL).
Slug rules
The default slug is my-login (URL looks like /my-login/). You can change it.
Allowed characters: letters, numbers, underscore, and hyphen.
- Works:
my_custom-log1n - Does not work:
my#c%stom-løg!n
Do not reuse the slug of an existing post or page.
Rename Login does not rewrite .htaccess or add rewrite rules. To turn it off, disable the feature in Firewall Settings. If you forget the custom URL, rename the plugin folder over FTP to deactivate Security Ninja, then log in at the default WordPress login.
It does not work with plugins or themes that hardcode links to /wp-admin or wp-login.php.
Redirect /wp-admin to the homepage
When Change login URL is on, logged-out visitors who open /wp-admin or /wp-login.php normally see an Access Denied page. You can send them to the homepage instead.
The switch is Redirect /wp-admin to homepage, on the same Login screen, under Change login URL. It is off by default.
The new login address is never shown on that redirect. People who need to sign in still need the custom URL from you or from their password manager. Leave the switch off if you want the Access Denied page.
The setting is included in Tools import and export, and in MainWP settings sync.
Developers can force it with the securityninja_rename_login_redirect_home filter. The filter receives the saved on or off value. Change login URL still has to be on.
add_filter('securityninja_rename_login_redirect_home', '__return_true');Temporary login plugins
Rename Login recognizes temporary-login links from Temporary Login Without Password, One Time Login, Magic Login, and Login Links. When that plugin is active, the first wp-admin request is allowed through so the person can finish signing in. Without that, Rename Login would bounce them before the temporary-login plugin could complete the login.
Details: Temporary login plugins.
