Author: Ben Treder • Website: BenTreder.com • Install: WordPress.org • PRO: Secure Login Shield PRO • ☕ Buy Me a Coffee
Free WordPress Login Protection
Hide the default WordPress login and replace it with your own private entry point.
Secure Login Shield helps protect WordPress by hiding /wp-login.php, letting you set a private login URL, returning stealth 404s for direct hits, and redirecting logged-out /wp-admin/ visitors away from the default login screen.
🔒 Private Login URL
🚫 Stealth 404 Protection
🏠 Homepage Redirect
SHA-256 Checksum | MD5 Checksum
In WordPress: Plugins → Add New → Upload Plugin, then upload secure-login-shield.zip.
Why site owners use Secure Login Shield
Private Login URL
✓Create your own hidden slug, such as /dragon-lair, and stop relying on the default WordPress login path.
Stealth 404 Response
✓Direct requests to /wp-login.php return a 404 Not Found response instead of exposing your login screen.
Cleaner Logged-Out Behavior
✓Logged-out visits to /wp-admin/ can be sent back to the homepage rather than the default login page.
How it works
Install and set your private slug
- Install or upload Secure Login Shield.
- Activate the plugin.
- Go to Settings → Secure Login Shield.
- Enter your private login slug and save changes.
- Go to Settings → Permalinks and click Save Changes.
- Clear any cache or CDN and test the new login URL.
- Deactivate the plugin anytime to restore WordPress defaults.
Expected behavior
- Only your private slug loads the login screen.
/wp-login.phpreturns a stealth 404.- Logged-out
/wp-admin/traffic is redirected away from the default login screen. - Disabling the plugin cleanly restores normal WordPress behavior.
This makes the free version a strong first step for reducing casual scans and automated noise against the default login path.
Screenshots
Free vs PRO — Choose the right shield
| Feature | Free | PRO |
|---|---|---|
| Custom Secret Login URL | ✔ 1 slug | ✔ Multiple routes |
Hide /wp-login.php and protect default login exposure |
✔ | ✔ |
| Honeypot login trap | ✖ | ✔ |
| IP allow and deny rules | ✖ | ✔ |
| Country-based access controls | ✖ | ✔ |
| Time-based login access windows | ✖ | ✔ |
| Role-based redirects after login | ✖ | ✔ |
| IP logging and dashboard reports | ✖ | ✔ |
| Export logs as CSV or JSON | ✖ | ✔ |
| Custom branding for the login experience | ✖ | ✔ |
| Upgrade to Secure Login Shield PRO | ||
Why upgrade to PRO?
More control
Move beyond a single secret slug with deeper access rules, multiple routes, and more advanced policy controls.
More visibility
Track suspicious activity with logging, dashboards, and exports that help you understand what is hitting your login endpoints.
More deterrence
Add honeypots, IP rules, and location-based controls to make automated attacks less effective and easier to manage.
Support and links