Knowledgebase

Can I change my wp-admin URL for security?

Changing the /wp-admin/ access point seems to be a commonly held belief that this increases your admin security. 

Sorry - it doesn't. 

The actual login page is at yourdomain.com/wp-login.php and this is not a URL you can change as it's part of Wordpress core.

If you move the /wp-admin to something else all you are doing is causing yourself work and adding code, or a plugin that adds processing time to your site that you also have to keep up to date. Any incursion attempt by a hacker doesn't happen on this page either, they always use the /wp-login.php 

This technique is referred to as Security through Obscurity as is discouraged by all security bodies as it leads to a false sense of security. 

You should be implementing the principles of least privilege, long, secure, unique passwords, restricted privilege session times, and multi factor authentication

 

Was this answer helpful?

0 Users Found This Useful