Security Blog

How to rename wp-login.php

WP Cerber lets you easily and safely change default login page wp-login.php to whatever you want. In other words you can set up Custom login URL and hide wp-login.php from automated attacks. You don’t need to edit .htaccess file manually or rename your actual wp-login.php file. With WP Cerber you can do it in several clicks. It is safe.

  1. Open WP Cerber settings page.
  2. Enter your desired login URL (remember it or bookmarked it) into Custom login URL field
  3. Check Block direct access to wp-login.php and return HTTP 404 Not Found Error
  4. Save settings.
  5. Done!
How to rename wp-login.php

How to rename wp-login.php


  • After you set up Custom login URL and you are using a caching plugin like W3 Total Cache or WP Super Cache you should add the slug of the new login URL to the list of pages not to cache.
  • For multisite mode login URL will be changed for all sites globally.
  • Never rename wp-login.php file directly. After updating your WordPress to new version, wp-login.php will be accessible for intruders again.

See also: How to hide wp-admin and wp-login.php from possible attacks

Last posts from WordPress security blog

I’m a self-employed developer who builds software products and services using WordPress for more that seven years. I enjoy partnering with others for interesting and challenging projects. If you’re interested in, feel free to contact me.

View Comments