Protect WP Admin
Protect your WP site by changing the default wp-admin URL and customizing the login page for enhanced security.
Use with caution
Protect WP Admin works, but test it on a staging site before relying on it in 2026. It runs on 10K+ sites, is rated 3.6/5 and was last updated 8 months ago, and scores 55/100 on our health check.
- Proven at scale on 10K+ active sites
- Only tested up to WordPress 6.9 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Protect WP Admin stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| admin url | #18 |
| hack prevention | #2 |
| protect admin | #7 |
| secure admin | #10 |
| secure login | #80 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 3.6 from 50 reviews
About Protect WP Admin
From the official readme · v4.2Description
Protect WP Admin adds an extra security layer to your WP site by allowing you to rename and secure the wp-admin and wp-login.php URLs.
- Change default admin URL (e.g., /wp-admin to /myadmin)
- Restrict access to dashboard by roles or specific user IDs
- Customize login page colors and logo
- Block access to default login URLs
Stop bots and hackers from brute-forcing your login page. This plugin is ideal for any site looking to increase login security without modifying core files.
Video Demo:
https://youtu.be/Mxr2MLDNACE
Pro Add-on Available:
Click here to download add-on
Features
- Define Custom WP Admin Login URL (e.g., http://yourdomain.com/myadmin)
- Add custom logo and styling to login page
- Restrict wp-admin access to only admin or defined user IDs
- Redirect all unauthorized users and bots
Pro Features
- Rename wp-admin completely
- Set login attempt limits
- Track login history
- Change usernames
- More style controls
Get the Pro Version:
Protect WP Admin Pro
License
This plugin is licensed under the GPLv2 or later.
https://www.gnu.org/licenses/gpl-2.0.html
Installation
- Upload the plugin folder to
/wp-content/plugins/ - Activate the plugin via the Plugins screen
- Go to Settings > Protect WP Admin to configure the plugin
- Update permalink structure under Settings > Permalinks (important!)
Frequently asked questions
I’m locked out of admin. What can I do?
Rename the plugin folder via FTP (e.g., /protect-wp-admin to /pwa-disabled). This disables the plugin.
I see a 404 page at the new login URL
Ensure your .htaccess is writable and permalinks are not set to “Plain.”
Can I restrict users by role?
Yes. Only administrators or allowed user IDs will have wp-admin access if enabled.
Does it work with custom themes?
Yes. It works independently of your theme.
Does it block brute force attacks?
It blocks access to the default login URLs, which stops many automated attacks.
Changelog
Update immediately to fix critical security logic and enhance compatibility with WordPress 6.6+
4.0
- Fixed major bug
- Tested with WordPress 6.6.2
3.8
- Security updates
- Tested with WordPress 5.9.3
3.7
- Fixed URL issue
- Code optimization
3.6
- Optimized code and security
- Tested with WordPress 5.8.2
3.5
- Resolved double slash issue in login URL
3.4
- Added admin bar restriction for non-admin users
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Protect WP Admin alternatives
All admin url plugins →| Rank | Plugin | Active installs |
|---|---|---|
| 2 |
Custom WP-Admin URL
This is a plugin to give your authority to change wordpress admin url with your demand.
|
100+ |
| 3 |
Sumedia Urlify
Makes /wp-admin/ and /wp-login.php pathes configurable using mod_rewrite.
|
<10 |
FAQ
Protect WP Admin: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 26, 2026
Is Protect WP Admin free?
Yes. Protect WP Admin is free to download and use from the official WordPress.org plugin directory.
Is Protect WP Admin safe to use in 2026?
Protect WP Admin works, but test it on a staging site before relying on it in 2026. It runs on 10K+ sites, is rated 3.6/5 and was last updated 8 months ago, and scores 55/100 on our health check.
How many websites use Protect WP Admin?
Protect WP Admin is active on 10K+ WordPress websites and has been downloaded 540,685 times since it launched in October 2014. It was downloaded 1,032 times in the last 30 days.
Does Protect WP Admin work with WordPress 7.1?
Protect WP Admin is officially tested up to WordPress 6.9.9, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
When was Protect WP Admin last updated?
The latest version, 4.2, was released on February 5, 2026 (8 months ago).
Who makes Protect WP Admin?
Protect WP Admin is developed and maintained by WP-EXPERTS.IN.
What are the best alternatives to Protect WP Admin?
The most popular alternatives to Protect WP Admin are Custom WP-Admin URL (100+ installs) and Sumedia Urlify (<10 installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
