Change WordPress login URL to stop hackers in their tracks!

[@leoduquette]

Not all heros wear capes!! Thank you so much and you are fantastic at explaining it.

[@wplearninglab]

Good one Leo! I only wear a cape on Halloween! And sorry for the delay. I'm still trying figure out my summer holiday work schedule!

[@visualmodo]

Excellent work!!!

[@wplearninglab]

Thanks and thanks for watching!

[@elpetr2738]

Thank you Bjorn. Your new video is the great reminder and important information _)

[@wplearninglab]

You're welcome Petr, thanks for watching!

[@rkardos4220]

Very simple and smart. Thanks

[@wplearninglab]

You're welcome, thanks for watching! Let me know if you have any questions :)

[@j8o437nqcr7b]

Bjorn, Thank you for this video. I've been using a security plugin to lockout several attempted bad logins. I've been getting a lot of those especially last year july when the traffic on my website increased.

[@wplearninglab]

It's pretty eye opening just how many bots try to brute force websites (not just WordPress either), but you never know it's happening until you start logging it. My feeling is you'll keep getting more and more as your traffic increases. Installing the Blackhole for Bad Bots plugin on my sites was also eye opening. I have a video about it here: kzbin.info/www/bejne/Znykq3p6fdZgZ68 The plugin is designed to stop bots that are trying to scan your site for vulnerabilities.

[@j8o437nqcr7b]

@@wplearninglab Thank you so much Bjorn. I idn't realise how exposed my sites were. I also watched your other video about the xmlrp file. lol I shall comment there regarding my experience with it

[@Azam_Lahore]

Thank you, appreciate it.

[@wplearninglab]

You're welcome Azam, thanks for watching! Let me know if you have any questions :)

[@rcbilly2009]

Thank you very much

[@wplearninglab]

You're welcome, thanks for watching! Let me know if you have any questions :)

[@mabuhaychannel7575]

i followed ur instructions and that plugin blocked me. so I had to deactivate it again in my cpanel to login into my website. :-(

[@dronemitra]

My WordPress is deactivating this plugin immediately upon install.

[@wplearninglab]

Interesting. Hosts sometimes disallow certain plugins for various reasons. Maybe your host has built-in protection for the wp-login.php file and the wp-admin page and those protections wouldn't work if you change the URL of the login page.

[@Rico_Suave_]

Thank you

[@wplearninglab]

You're welcome, thanks for watching! Let me know if you have any questions :)

[@marisolavellanet5177]

404 for 11 point wordpress security test list

[@daedaluxe]

Better to just let them brute force it and auto block commonly attacked usernames and throttle login rates with an autolock period, moving this page can cause issues with user registration.

[@wplearninglab]

True, but 99% of sites don't require user's being able to create their own accounts.

[@daedaluxe]

@@wplearninglab What....