𝗥𝗲𝗻𝗮𝗺𝗶𝗻𝗴 𝗪𝗽 𝗟𝗼𝗴𝗶𝗻 𝗜𝘀 𝗡𝗼𝘁 𝗘𝗻𝗼𝘂𝗴𝗵

𝗥𝗲𝗻𝗮𝗺𝗶𝗻𝗴 𝗪𝗽-𝗟𝗼𝗴𝗶𝗻 𝗜𝘀 𝗡𝗼𝘁 𝗘𝗻𝗼𝘂𝗴𝗵

You want to hide your WordPress admin. Many people suggest renaming the login URL. This solves one small problem.

Rename plugins let WordPress load before they show a 404 error. This wastes your server CPU. Block the path at the server level. This stops the request before PHP runs.

Bots do not stop when they miss the login page. They look for other clues. They read your HTML source.

They see:

• Plugin folders
• Theme paths
• Version numbers

These clues tell bots you use WordPress. They match your versions to known bugs.

WordPress also shares clues in the REST API. It often lists your usernames.

Check your site with these tests:

• Look for generator tags in the source.
• See if the login path boots PHP.
• Check for username leaks in the REST API.

Moving the login page is a start. It is not a full security plan.

Source: https://dev.to/cifi/renaming-wp-login-isnt-the-same-as-making-wp-admin-disappear-2gg8