Title: DevOrbit Login Shield
Author: NiteshPatel
Published: <strong>July 29, 2026</strong>
Last modified: July 29, 2026

---

Search plugins

![](https://ps.w.org/devorbit-login-shield/assets/banner-772x250.png?rev=3626789)

![](https://ps.w.org/devorbit-login-shield/assets/icon-256x256.png?rev=3626789)

# DevOrbit Login Shield

 By [NiteshPatel](https://profiles.wordpress.org/nitspatel/)

[Download](https://downloads.wordpress.org/plugin/devorbit-login-shield.1.0.0.zip)

 * [Details](https://wordpress.org/plugins/devorbit-login-shield/#description)
 * [Reviews](https://wordpress.org/plugins/devorbit-login-shield/#reviews)
 *  [Installation](https://wordpress.org/plugins/devorbit-login-shield/#installation)
 * [Development](https://wordpress.org/plugins/devorbit-login-shield/#developers)

 [Support](https://wordpress.org/support/plugin/devorbit-login-shield/)

## Description

DevOrbit Login Shield lets you change the address of your login page from the default`/
wp-login.php` to a slug you choose, such as `/my-login/`. Requests to `wp-login.
php`, and requests to `/wp-admin/` from anyone who is not logged in, are redirected
to the home page (or shown a 404, your choice) instead of reaching a login form.

This does not change any core files, database table, or rewrite rules. It intercepts
the request early and serves WordPress’s own login logic at your chosen URL, so 
every feature of the normal login screen, including lost password, registration,
and logout, continues to work exactly as before, just at a different address.

**Features**

 * Choose any custom slug for your login page.
 * Direct requests to wp-login.php are blocked, and wp-admin is blocked for logged-
   out visitors.
 * Blocked requests are intercepted before WordPress can redirect to the login screen,
   so your custom slug is never exposed in a Location header.
 * Optionally removes the “Log in” and “Register” links themes show to logged-out
   visitors, so the custom URL stays out of your public HTML.
 * Choose whether blocked requests are redirected home or shown a 404.
 * Logged-in users, AJAX, cron, and WP-CLI are never affected.
 * No rewrite rules, no .htaccess changes, no database schema changes.
 * Settings are removed cleanly on uninstall.

**A note on security**

This plugin reduces exposure to automated login scanners and brute-force bots that
target `/wp-login.php` by default. It is not a replacement for strong passwords,
two-factor authentication, or a login rate-limiting plugin, and it should be used
alongside those, not instead of them.

## Screenshots

[⌊The Login URL settings screen under Settings.⌉⌊The Login URL settings screen under
Settings.⌉[

The Login URL settings screen under Settings.

## Installation

 1. Upload the `devorbit-login-shield` folder to `/wp-content/plugins/`, or install
    directly through Plugins > Add New in your WordPress admin.
 2. Activate the plugin through the Plugins screen.
 3. Go to Settings > DevOrbit Login Shield and choose your custom slug.
 4. Decide whether to keep public login links, using the “Public login links” setting
    on the same screen.
 5. **Bookmark the new login URL shown on that screen before navigating away.**

## FAQ

### I got locked out. How do I get back in?

Connect to your site via FTP/SFTP or your hosting file manager and delete or rename
the `devorbit-login-shield` folder inside `/wp-content/plugins/`. This deactivates
the plugin immediately and restores normal access to `/wp-login.php` and `/wp-admin/`.

### Why has the “Log in” link disappeared from my site?

Because the “Public login links” setting is on. Those links are generated from your
login URL, so any page that renders one, such as the Meta widget or a comment form
set to require registration, would print your custom URL in its HTML for anyone 
to read. With the setting on, the links are removed instead. Turn it off under Settings
> DevOrbit Login Shield if your site needs a visible login link.

### Do password-protected posts still work?

Yes. The password form posts to `wp-login.php?action=postpass`, which only sets 
a cookie and redirects, so that one request is allowed through. It never renders
a login form.

### Does this work with multisite?

It works on a per-site basis. Network admin (`/wp-admin/network/`) access is not
restricted by this plugin.

### Will this break plugins that use AJAX or handle form submissions while logged out?

No. Requests to `admin-ajax.php` and `admin-post.php` are always allowed through,
whether or not the visitor is logged in.

### Does this change my database or add rewrite rules?

No. It stores two small options (your chosen slug and your preferred blocked-request
behaviour) and removes them automatically when the plugin is deleted.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“DevOrbit Login Shield” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ NiteshPatel ](https://profiles.wordpress.org/nitspatel/)

[Translate “DevOrbit Login Shield” into your language.](https://translate.wordpress.org/projects/wp-plugins/devorbit-login-shield)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/devorbit-login-shield/),
check out the [SVN repository](https://plugins.svn.wordpress.org/devorbit-login-shield/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/devorbit-login-shield/)
by [RSS](https://plugins.trac.wordpress.org/log/devorbit-login-shield/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.0

 * Initial release.

## Meta

 *  Version **1.0.0**
 *  Last updated **12 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 5.8 or higher **
 *  Tested up to **7.0.2**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [Brute Force](https://wordpress.org/plugins/tags/brute-force/)[hide login](https://wordpress.org/plugins/tags/hide-login/)
   [login](https://wordpress.org/plugins/tags/login/)[security](https://wordpress.org/plugins/tags/security/)
   [wp-admin](https://wordpress.org/plugins/tags/wp-admin/)
 *  [Advanced View](https://wordpress.org/plugins/devorbit-login-shield/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/devorbit-login-shield/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/devorbit-login-shield/reviews/)

## Contributors

 *   [ NiteshPatel ](https://profiles.wordpress.org/nitspatel/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/devorbit-login-shield/)