Protect your WP site by changing the default wp-admin URL and customizing the login page for enhanced security.
As of April 2026, Protect WP Admin is a WordPress admin url plugin with 10K+ active installations and a 3.6/5 rating from 50 reviews. It has been downloaded 534K+ times in total. Requires WordPress 6.0+ and PHP false+. Available on WordPress.org since 2014. Recently updated within the last 3 months. Downloads are up 12% this week. Top alternative: Custom WP-Admin URL.
Protect WP Admin adds an extra security layer to your WP site by allowing you to rename and secure the wp-admin and wp-login.php URLs.
Stop bots and hackers from brute-forcing your login page. This plugin is ideal for any site looking to increase login security without modifying core files.
Video Demo:
https://youtu.be/Mxr2MLDNACE
Pro Add-on Available:
Click here to download add-on
Thank you for giving us Simple and Amazing plugin.
Please check Login form customizing is not working. Hide wp-admin is working good.
Thanks again.
A loophole has been found by hackers. My websites have been attacked by login brute-force thousands times everyday. Hackers could access wp-login.php directly when Protect-wp-admin was enabled. I try disabling the file access to wp-login.php in .htaccess but it also disable accessing the login page via the URL defined in Protect-wp-admin. Finally, it makes this plugin useless.
After updating the WordPress version to 5.6, none of my team could log in any longer. Both URLs, the one created through the plugin and the original wp-admin link, kept redirecting to the Homepage. I had to deactivated all the plugins via MyPHPAdmin to get back the control of our website. This plugin was the first I reactivated and I could immediately replicate the issue. This is imho not acceptable.
The plugin works as expected and after a recent WP update, it didn’t work anymore. contacted the support and they helped me out super quick.
Junk, do not use. Updated to WordPress 5.6 and I am now locked out of ALL my websites. Avoid at all costs.
| WordPress | 6.0+ requiredTested up to 6.9.4 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.