Mask My Admin – WordPress Login Security & URL Protection
A WordPress Admin URL Masking Plugin with optional IP-based whitelisting to limit access to allowed IPs only.
00
·0 active installs·Updated 1 week agoAs of April 2026, Mask My Admin is a WordPress custom login plugin with 0 active installations and a 0/5 rating0. It has been downloaded 211 times in total. Requires WordPress 6.0+ and PHP 7.4+. Available on WordPress.org since 2026. Actively maintained — updated within the last month. Top alternative: LoginPress | wp-login Custom Login Page….
0/5Rating
0active installs
211total downloads
1 monthsince 2026
Overview
MaskMyAdmin is a lightweight WordPress plugin designed to enhance your login page security by:
– Replacing the default wp-admin and wp-login.php URLs with a custom login path of your choice
– Enforcing IP-based access controls for the WordPress dashboard and login screen
– Preventing unauthorized access or brute-force attempts by obscuring default login endpoints
Designed for site owners and developers who want to hide their admin panel from bots, attackers, or curious users.
Whether you’re running a blog, WooCommerce store, or enterprise WordPress install — MaskMyAdmin gives you a simple, intuitive way to lock down your admin entry points.
Features:
* Change wp-admin login path to a custom one (e.g., /secure-login)
* Optional IP-based whitelist — restrict dashboard access to specif…
Screenshots
Ratings & Reviews
00 reviews
5 ★
0
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 6.0+ requiredTested up to 6.9.4 |
| PHP | 7.4+ required |
Top Alternatives to Mask My Admin – WordPress Login…
Frequently Asked Questions
Changelog
1.2.0
- Security: Removed debug backdoor file (debug-mma.php)
- Security: Fixed IP spoofing vulnerability — IP detection now uses REMOTE_ADDR by default with configurable trusted proxy headers
- Security: Disabled broken 2FA feature (hardcoded bypass codes removed)
- Security: Fixed unescaped output throughout the plugin
- Security: Replaced unsafe header() redirects with wp_redirect() / wp_safe_redirect()
…and 18 more changes
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.