Change the login URL with WPS Hide Login

WPS Hide Login changes the path of the login form without renaming wp-login.php or modifying the core. It can reduce automated attempts against the usual path, but it does not protect a stolen password or fix vulnerabilities.

Set it up

1. Keep a backup and access to the hosting files so you can deactivate the plugin if you get locked out.
2. In WordPress, open Plugins > Add New, search for WPS Hide Login and check the official listing, maintenance and compatibility with your version before installing it.
3. Install and activate it. Open its settings from Settings or the plugin's link; it may appear under Settings > General.
4. Choose your own path that does not reveal personal data or reuse a password. Save the change and keep the full URL.
5. Without logging out, test the new login from a private window.

Check password recovery, the theme's login links, caching and other security plugins. Exclude the new path from the cache when the configuration requires it. If you use multisite, check the network and per-site scope.

If you forget the path or login fails

If you have administrative access to the database, you can check the whl_page option for the right site. Another option is to temporarily deactivate the plugin by renaming its directory inside wp-content/plugins; do not rename the core file.

Once it is deactivated, test the usual login. If it still fails, another restriction, cache or configuration may be involved. Give the directory back its original name and check whether you need to reactivate the plugin after fixing it.

What protection to keep

Keep unique passwords, 2FA, login attempt limiting and updates. The login path is not a secret equivalent to a password and may appear in links or integrations. See the WordPress security tips.