Secure Login Shield
Hide /wp-login.php, set a private login URL, serve stealth 404s, and redirect logged-out /wp-admin/ visitors to your homepage.
🔒 Private login URL • 🚫 Stealth 404 • 🏠 Homepage redirect
SHA-256 Checksum | MD5 Checksum
In WordPress: Plugins → Add New → Upload Plugin, then upload secure-login-shield.zip.
Why Secure Login Shield?
Private Login URL
✓Set your own secret slug (e.g., /dragon-lair) and replace all core login links automatically.
Stealth 404 for /wp-login.php
✓Direct hits to /wp-login.php return a 404 Not Found (no hints, no mercy).
Homepage Redirect
✓Logged-out visits to /wp-admin/ go to your homepage, not the default login page.
How to Use
Install
- Upload or install Secure Login Shield.
- Activate the plugin.
- Go to Settings → Secure Login Shield.
- Set your private slug and save.
- Go to Settings → Permalinks → Save Changes.
- Clear cache/CDN. Test the new login URL.
- Deactivate the plugin anytime to restore defaults.
Behavior
- Only your private slug loads the login screen.
/wp-login.php→ stealth 404.- Logged-out
/wp-admin/→ homepage. - Deactivate plugin → everything reverts cleanly.
Screenshots
Free vs PRO — Which Shield Do You Need?
| Feature | Free | Pro |
|---|---|---|
| Custom Secret Login URL | ✔ 1 slug | ✔ Multiple (global, role, per-user) |
Hide /wp-login.php + /wp-admin | ✔ | ✔ |
| Login Honeypot (fake login page, logs bots) | ✖ | ✔ |
| IP Whitelist / Blacklist | ✖ | ✔ |
| Country Allow / Deny Rules | ✖ | ✔ |
| Schedule-based Login Access | ✖ | ✔ |
| Role-based Redirects After Login | ✖ | ✔ |
| IP Logging + Dashboard Reports | ✖ | ✔ |
| Export Logs (CSV / JSON) | ✖ | ✔ |
| Custom Branding (logo, colors) | ✖ | ✔ |
| Upgrade to PRO | ||
Contribute & Support
Author: Ben Treder • Website: BenTreder.com • Install: WordPress.org • ☕ Buy Me a Coffee