KakapoWP KakapoWP
Log in Try for free
Kakapo Security

Your own login URL

wp-login.php is the address every script tries first.

You enter a path of your own, for example /gartentor. The plugin loads the original wp-login.php file there — it is neither copied nor rebuilt, so WordPress updates keep working. For logged-out visitors, /wp-login.php then answers like a page that does not exist. Before the change is applied, the server calls the new address once itself.

Try it free for 24 hoursAll Security features

Your own login URL

Your own path instead of wp-login.php · Test request before the switch

ActiveCheck that it is reachable

What your own login URL gives you

Custom path, 3 to 40 characters
The name is checked against files, pages and bot lists
The original wp-login.php is included, not rebuilt
/wp-login.php becomes a 404 page for logged-out visitors
/wp-admin sends logged-out visitors to the homepage instead of the login
The new address goes to the administrator by e-mail

Here's how it works

1

Enter a path — the name is checked right away

2

The switch only happens after a successful test request

3

Access and emergency brake land in your inbox

FAQ about your own login URL

And what if I lock myself out?
There are three built-in ways back in for exactly that case: as long as your browser is logged in, you can still reach /wp-login.php. The new address is in the email that went to the administrator when the change was made. And the line define( 'KWPSEC_LOGIN_SLUG_OFF', true ); in wp-config.php switches straight back to wp-login.php.
Does that make the login secure?
No. Anyone who knows the address gets the perfectly normal login form — the place moves, nobody is checked. It takes the target away from mass scripts, nothing more. A failed-attempt limit and two-factor are still needed.
When does it not work?
In a multisite network and with “Plain” permalinks the toggle stays locked and states the reason. If the new address answers the test call with HTTP 404 — meaning the web server does not pass unknown paths on to WordPress — the change is rolled back and the login stays where it was.

More security features

Login protection →Two-factor →Hardening →
Ready?

Try Security free for 24 hours.

No credit card, no risk. Up and running in 2 minutes.

Try it for free now