{"id":251854,"date":"2025-09-20T05:54:40","date_gmt":"2025-09-20T05:54:40","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/secure-login-shield\/"},"modified":"2025-09-20T05:59:00","modified_gmt":"2025-09-20T05:59:00","slug":"secure-login-shield","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/secure-login-shield\/","author":23364955,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.3.0","stable_tag":"1.3.0","tested":"6.8.5","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"Secure Login Shield","header_author":"Ben Treder","header_description":"Hide wp-login.php, use a private login URL, return stealth 404s, and redirect logged-out \/wp-admin\/ to your homepage.","assets_banners_color":"777d7f","last_updated":"2025-09-20 05:59:00","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/www.buymeacoffee.com\/bentreder","header_plugin_uri":"https:\/\/plugins.bentreder.com\/secure-login-shield","header_author_uri":"https:\/\/bentreder.com","rating":5,"author_block_rating":0,"active_installs":0,"downloads":204,"num_ratings":1,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.3.0":{"tag":"1.3.0","author":"bdtreder","date":"2025-09-20 05:59:00"}},"upgrade_notice":{"1.3.0":"<p>After activating, <strong>save permalinks<\/strong> and <strong>clear cache<\/strong> to ensure your new login URL works correctly.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":1},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3364827,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3364827,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3364827,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3364827,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.3.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3364827,"resolution":"1","location":"assets","locale":""},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3364827,"resolution":"2","location":"assets","locale":""}},"screenshots":{"1":"Settings page showing the default login slug (\/wp-login.php)","2":"Settings page with a custom private slug (\/dragon-lair)"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[3691,31093,602,600,3830],"plugin_category":[38,54],"plugin_contributors":[],"plugin_business_model":[],"class_list":["post-251854","plugin","type-plugin","status-publish","hentry","plugin_tags-custom-login","plugin_tags-hardening","plugin_tags-login","plugin_tags-security","plugin_tags-wp-login","plugin_category-authentication","plugin_category-security-and-spam-protection","plugin_committers-bdtreder"],"banners":{"banner":"https:\/\/ps.w.org\/secure-login-shield\/assets\/banner-772x250.png?rev=3364827","banner_2x":"https:\/\/ps.w.org\/secure-login-shield\/assets\/banner-1544x500.png?rev=3364827","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/secure-login-shield\/assets\/icon-128x128.png?rev=3364827","icon_2x":"https:\/\/ps.w.org\/secure-login-shield\/assets\/icon-256x256.png?rev=3364827","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/secure-login-shield\/assets\/screenshot-1.png?rev=3364827","caption":"Settings page showing the default login slug (\/wp-login.php)"},{"src":"https:\/\/ps.w.org\/secure-login-shield\/assets\/screenshot-2.png?rev=3364827","caption":"Settings page with a custom private slug (\/dragon-lair)"}],"raw_content":"<!--section=description-->\n<p><strong>Secure Login Shield<\/strong> helps you lock down your WordPress login page.<br \/>\nBy default, WordPress exposes <code>\/wp-login.php<\/code> and <code>\/wp-admin\/<\/code>. Bots hammer these URLs every day.<\/p>\n\n<p>This plugin gives you a <strong>private login slug<\/strong> (e.g. <code>\/dragon-lair<\/code>) and hides the default login endpoint:<\/p>\n\n<ul>\n<li>Defaults to <code>\/wp-login.php<\/code> until you change it.<\/li>\n<li>Once changed, <strong>only your custom slug<\/strong> works.<\/li>\n<li>Direct access to <code>\/wp-login.php<\/code> shows a <strong>404 Not Found<\/strong> (stealth mode).<\/li>\n<li>Logged-out visitors hitting <code>\/wp-admin\/<\/code> are <strong>redirected to the homepage<\/strong>.<\/li>\n<li>Deactivate the plugin \u2192 everything reverts to normal.<\/li>\n<\/ul>\n\n<p>Made with \u2764\ufe0f by <a href=\"https:\/\/BenTreder.com\">Ben Treder<\/a><\/p>\n\n<h3>Features<\/h3>\n\n<ul>\n<li><strong>Private login slug<\/strong> (e.g. <code>\/dragon-lair<\/code>, <code>\/control-center<\/code>, <code>\/secret-gate<\/code>)<\/li>\n<li><strong>Stealth 404 protection<\/strong>: Bots hitting <code>\/wp-login.php<\/code> see \u201cNot Found\u201d<\/li>\n<li><strong>Homepage redirect<\/strong>: <code>\/wp-admin\/<\/code> (logged out) \u2192 homepage<\/li>\n<li><strong>Easy settings page<\/strong> under Settings \u2192 Secure Login Shield<\/li>\n<li><strong>Safe activation\/deactivation<\/strong>: no core hacks, auto-reverts when disabled<\/li>\n<\/ul>\n\n<h3>Contribute &amp; Support<\/h3>\n\n<ul>\n<li>Website: <a href=\"https:\/\/BenTreder.com\">BenTreder.com<\/a>  <\/li>\n<li>Author: <a href=\"https:\/\/profiles.wordpress.org\/bentreder\/\">Ben Treder<\/a>  <\/li>\n<li>Issues &amp; Feature Requests: Please open a ticket on <a href=\"https:\/\/BenTreder.com\">BenTreder.com<\/a>  <\/li>\n<li>Like this plugin? \u2b50 Leave a review and help spread the word!  <\/li>\n<li>\u2615 Support development: <a href=\"https:\/\/www.buymeacoffee.com\/bentreder\">Buy Me a Coffee<\/a><\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>secure-login-shield<\/code> folder to the <code>\/wp-content\/plugins\/<\/code> directory or install via Plugins \u2192 Add New \u2192 Upload.<\/li>\n<li>Activate the plugin through the \"Plugins\" menu in WordPress.<\/li>\n<li><strong>Go to Settings \u2192 Secure Login Shield.<\/strong><\/li>\n<li>Set your private slug (example: <code>dragon-lair<\/code>).<\/li>\n<li><strong>Go to Settings \u2192 Permalinks \u2192 Save Changes<\/strong> (refresh rewrite rules).<\/li>\n<li>If you use a caching plugin or CDN, <strong>clear cache<\/strong> to avoid stale redirects.<\/li>\n<li>Log in using <code>https:\/\/yoursite.com\/dragon-lair<\/code>.<\/li>\n<\/ol>\n\n<p><strong>Important:<\/strong> Bookmark your new login URL! If you forget it, you\u2019ll need to disable the plugin via FTP or database.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id='will%20this%20break%20my%20site%3F'><h3>Will this break my site?<\/h3><\/dt>\n<dd><p>No. By default it uses <code>\/wp-login.php<\/code> until you change it. Deactivating the plugin instantly reverts WordPress to normal behavior.<\/p><\/dd>\n<dt id='can%20i%20completely%20block%20%2Fwp-login.php%3F'><h3>Can I completely block \/wp-login.php?<\/h3><\/dt>\n<dd><p>Yes. Once you set a slug, <code>\/wp-login.php<\/code> (and actions) return a 404 Not Found.<\/p><\/dd>\n<dt id='what%20if%20i%20forget%20my%20private%20slug%3F'><h3>What if I forget my private slug?<\/h3><\/dt>\n<dd><p>Deactivate the plugin via FTP (delete or rename <code>secure-login-shield<\/code>). WordPress will go back to <code>\/wp-login.php<\/code>.<\/p><\/dd>\n<dt id='does%20this%20work%20with%20caching%20plugins%20or%20cdns%3F'><h3>Does this work with caching plugins or CDNs?<\/h3><\/dt>\n<dd><p>Yes, but after changing your slug, you should clear cache\/CDN to avoid serving stale redirects.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.3.0<\/h4>\n\n<ul>\n<li>Rebrand to <strong>Secure Login Shield<\/strong> by Ben Treder<\/li>\n<li>Default slug remains <code>\/wp-login.php<\/code> (safe on first install)<\/li>\n<li>Added activation notice: Save permalinks + clear cache after activation<\/li>\n<li>Stealth 404 mode enforced when custom slug is chosen<\/li>\n<li>Homepage redirect for logged-out visits to <code>\/wp-admin\/<\/code><\/li>\n<\/ul>\n\n<h4>1.2.0<\/h4>\n\n<ul>\n<li>Added stealth 404 mode<\/li>\n<li>Improved security enforcement<\/li>\n<\/ul>\n\n<h4>1.1.0<\/h4>\n\n<ul>\n<li>Redirected \/wp-admin\/ \u2192 homepage for logged-out users<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release with custom login slug + wp-login.php block<\/li>\n<\/ul>","raw_excerpt":"Create a private login URL and hide \/wp-login.php with stealth 404s. Logged-out \/wp-admin\/ visits redirect to your homepage.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/251854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=251854"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/bdtreder"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=251854"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=251854"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=251854"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=251854"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=251854"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=251854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}