# Changing WordPress admin login page default URL

> Change the default WordPress login URL from wp-admin to a custom address to cut down on bot login attempts.

Source: https://helpcenter.ruachost.com/wordpress/guides/changing-wordpress-admin-login-page-default-url/

By default, WordPress uses `/wp-admin` or `/wp-login.php` as the login page URL. This is widely known and often targeted by bots and hackers. On **ruachost.com**, you can improve security by changing the default login URL to something custom.

## Why Change the Login URL?

- Prevents automated bots from easily finding your login page.
- Reduces brute‑force attacks.
- Adds an extra layer of security without affecting functionality.

## Method 1: Use a Plugin (Recommended)

The easiest way is to use a plugin such as **WPS Hide Login**.

1. **Log in to WordPress** with an administrator account.
2. In the dashboard, go to **Plugins → Add New**.
3. Search for **WPS Hide Login**.
4. Click **Install Now**, then **Activate**.
5. Go to **Settings → General**.
6. Scroll down to **WPS Hide Login** section.
7. Enter a new login URL (e.g., `/mysecurelogin`).
8. Click **Save Changes**.

✅ Your login page will now be accessible only via the new URL.

## Method 2: Manual Code (Advanced)

If you prefer not to use a plugin:

1. Access your WordPress files via FTP or hosting file manager.
2. Rename `wp-login.php` to something unique (e.g., `mylogin.php`).
3. Update references in the file to match the new filename.
4. Update `.htaccess` rules to redirect `/wp-login.php` requests to your new file.

⚠️ This method requires technical expertise and may break updates if not done carefully.

## Important Notes

- Always back up your site before making changes.
- Use a **child theme** or plugin method to avoid losing changes during updates.
- Do not share your custom login URL publicly.
- Combine with other security measures (CAPTCHA, two‑factor authentication).