Custom Login URL

The Custom Login URL module lets you change the default WordPress login page (wp-login.php) to a custom slug of your choice. By hiding the standard login endpoint, you can reduce automated login attacks, protect against brute-force attempts, and create a more secure and branded login experience.

How to use

To enable the Custom Login URL module:

1. Click on the “Security” category
2. Locate “Custom Login URL”
3. Click the switch to enable

Open the module to set your new login URL and redirection behavior.

What’s next?

Use this module to change the default WordPress login URL from

wp-login.php

to a custom slug. This helps reduce automated login attacks and hides the default entry point.

What it does:

• Replaces all login links that point to wp-login.php with your custom slug
• Handles direct access to wp-login.php or wp-admin according to your chosen redirect behavior
• Plays nicely with other WP mazic modules like Limit Login Attempts, which will detect your custom login URL

1. Configure settings

• Settings:
  • Custom Login URL Slug
    • Example: entering my-login makes your login page available at https://yoursite.com/my-login/
  • Redirect Type (what to do if a user hits wp-admin/wp-login.php directly):
    • Home Page
    • 404 Page
    • Custom URL
    • Existing Page
    • Custom Message
  • Existing Page
    • Pick a published page (shown when Redirect Type = Existing Page)
  • Custom Redirect URL
    • Full URL (https://example.com/path) or relative path (/about-us). Shown when Redirect Type = Custom URL.
  • Access Denied Message
    • Message shown when Redirect Type = Custom Message

Click Save.

Best Practices

• Choose a unique, memorable slug (avoid common terms like “login” or “admin”)
• Update any bookmarks or documentation to the new URL
• If using caching/CDN, exclude the login URL slug from caching
• Pair with “Limit Login Attempts” for stronger protection

Troubleshooting

• Can’t reach login page:
  • Confirm the slug exactly matches what you saved (including any trailing slash your site uses)
  • If you forgot the slug:
    • Access the database (options) or disable the plugin/module temporarily via SFTP to regain access
• Redirect loop or 404:
  • Check your Redirect Type and destination (Existing Page is published; Custom URL is valid)
  • Clear caches (server/CDN/plugin)
• Other security/login plugins:
  • Disable other plugins that also rewrite the login URL to avoid conflicts
• Custom Redirect URL validation:
  • Must be a full URL starting with http/https or a relative path beginning with “/”

Compatibility & Notes

• Affects WordPress login endpoints only; does not change front-end navigation
• Works with pretty permalinks; the module handles common edge-cases with trailing slashes
• “Limit Login Attempts” automatically reads your custom login URL for its logic
• After enabling, WordPress-generated login links will point to your custom slug

This module is perfect for:

• Hiding the default login URL from bots
• Adding another layer of obscurity to reduce brute-force attempts
• Aligning with custom-branded admin experiences