How-to · Intermediate · 15 minutes
How to Hide the WordPress Login Page
Move wp-login away from the address every bot on earth already knows — a practical, jargon-free walkthrough with the classic mistake flagged before you make it.
Straight answer first
In a line: move wp-login away from the address every bot on earth already knows — a intermediate-level task that takes 15 minutes.
The walkthrough below covers every step, the mistake most people make, and the shortcut worth keeping. On Hosting Seller plans several of these steps are already done for you, and we say where.
Written by the Hosting Seller staff · Checked 1 August 2026
Intermediate
Difficulty level
15 minutes
Time to allow
5
Stages
24/7
Help at any hour
This guide assumes no expertise at all — just a hosting account, a browser and 15 minutes of attention. Every instruction works on our platform exactly as written, and carries over to any standard cPanel host.
One promise before you start: nothing in this guide is irreversible. Where a step could bite, we say so and give you the undo.
The overview before the detail
The job breaks into a few clear stages: know what it actually buys, use a login-rename plugin, add the protections that count, test the other ways in too and remember where the way back out is.
Each stage is a few minutes of steady clicking — the time it takes depends mostly on how familiar the control panel already feels. The detailed steps sit further down this page; skim the whole route once before you begin.
The classic snag
Treating the hidden address as the security itself. An obscure URL in front of a weak password is still a weak password. The rename is decoration on the wall; two-factor authentication is the wall.
It is worth learning because it is not some rare edge case — it is the single most common reason this task turns into a support ticket. Knowing it up front turns the whole job from risky into routine.
The trick worth borrowing
The quieter your logs get, the more visible a real attack becomes. Once the drive-by bots stop finding the login, the failed attempts still showing up are the ones genuinely worth reading.
Small habits like this are the real difference between people who find hosting easy and people who find it stressful. The tools are identical; the working method is not.
What you can skip on a Hosting Seller plan
We have automated the steps that do not deserve your time: certificates issue and reissue themselves, the installer handles application setup, the daily backup covers the what-if, and per-site settings live in a panel instead of a config file. The guide above covers what remains — the part that is actually about your site.
Stuck halfway through at an odd hour? That is exactly what round-the-clock human support is for — tell us where you are in this guide and we will pick it up from there.
The hosting this guide is written against
Every walkthrough on our how-to shelf is tested on the platform we actually run — cPanel, LiteSpeed, NVMe, one-click installs — so the instructions match your screen instead of gesturing vaguely at it.
SSL comes free with every plan and reissues itself before it lapses, so nobody has to diary the padlock.
- Step by step, tested exactly as printed
- The snag flagged before you reach it
- The dull steps are already automated
- People on hand at any hour if you stall
Why Hosting Seller
On every plan, as standard
Works exactly as written
Every step tested on the platform we run — no 'your host may differ' hand-waving anywhere.
5 steps, no filler
Each stage is a few minutes of steady clicking, with the fiddly parts marked as fiddly.
No jargon toll
Terms are explained where they appear or linked to the glossary — nothing assumes you already know.
The snag, named early
The classic mistake for this exact job is flagged before step one, so 15 minutes stays 15 minutes.
Help on the counter
Stuck on step three at midnight? Support answers at any hour, mid-guide included.
Automation where it belongs
SSL, backups and installs run themselves here, so the guide covers only what is genuinely yours to do.
First Steps
From choosing to live
- 1
Know what it actually buys
Renaming the login URL takes you out of the constant automated bombardment of wp-login.php. That is noise reduction and cleaner logs. It is not, on its own, security in any deep sense.
- 2
Use a login-rename plugin
A login-URL plugin maps yourdomain.com/your-chosen-path to the login form and returns 404 for the defaults. Write the new path down somewhere that is not the site you just locked.
- 3
Add the protections that count
Two-factor authentication and a cap on failed attempts carry the actual weight. The hidden address thins the crowd at the door; those two are what the door is made of.
- 4
Test the other ways in too
Check that wp-admin redirects sensibly and that any shop or membership login forms, which use their own pages, still work exactly as they did before.
- 5
Remember where the way back out is
If the plugin ever misbehaves, renaming its folder through File Manager restores the standard URLs. Being locked out by your own security is recoverable — merely irritating.
In the Box
Packed with every plan
- LiteSpeed caching running at the server, not bolted on by plugin
- A 30-day money-back guarantee on every hosting plan
- One-click installs for WordPress and 400+ other applications
- Webmail in the browser plus IMAP, POP and SMTP for your own client
- Mailboxes that carry your own domain name
- WebP image optimisation built in and costing nothing
- A domain free for year one when you order annually
- A 99.9% uptime commitment, watched by monitoring day and night
- Staging copies so changes get tested before they go live
- PHP versions picked per site from the panel
Across the Counter
The questions we get asked most
Is there any real point in hiding the login page?
As log hygiene and as a way to stop brute-force noise, yes — it is cheap and it does what it claims. As a replacement for two-factor and strong passwords, no. It filters the drive-by bots, not anyone actually aiming at you.
I have forgotten my custom login address — now what?
Rename the plugin's folder inside wp-content/plugins through cPanel and the standard URLs come straight back. Log in, then set a path you can remember but nobody would guess, and note it somewhere off the site.
Who actually runs the company?
Hosting Seller is a trading name of Bohzo Ltd, a company registered in England and Wales — a real business with a public record and terms published under English law. Looking that up is worth doing about any host before you hand over your domain.
Does hosting come with mailboxes?
It does — mailboxes on your own domain ship with every hosting plan, with webmail, IMAP, POP and SMTP access and spam filtering fitted as standard. There is also standalone email hosting for domains whose website lives somewhere else entirely.
Do you shift an existing site across at no charge?
We do. Open a ticket with the login details for your current host and the whole lot comes over: files, databases, mailboxes and configuration. You check the copy before DNS changes hands, and the old site keeps serving customers until the new one takes the traffic, so nobody ever sees a gap.
Does the price climb when the term is up?
No. What you pay to order is what you pay to renew, year after year. We do not run teaser rates, so there is no year-two ambush waiting in the calendar, and your bookkeeping can treat the hosting line as a fixed number.
Can one plan hold more than a single website?
From the Pro tier upward, yes — several sites, each with its own domain, mailboxes and certificate, all under one account. If those extra sites belong to clients rather than to you, reseller hosting is the better fit: it gives each one proper separation.
Read next
How to Block Unwanted Visitors by IP
Turn a persistent nuisance away at the door, knowing what the tool can and cannot do — intermediate level, about 10 minutes.
How to Point a Domain to Your Hosting
Join a domain bought anywhere to the hosting account that will serve it — beginner level, about 10 minutes plus propagation.
SSL Certificates
SSL free on every plan, with wildcard and EV on the shelf if needed.
WordPress Hosting
WordPress looked after for you — LiteSpeed caching, staging copies and daily backups.
Packing up and moving host? Take our checklist.
A plain running order for a move nobody notices: what to copy first, how to carry email across without dropping a single message, when to point DNS, and the two slips behind nearly every hour of downtime we get called about.
Give your website a proper home.
Quick NVMe hosting, SSL and the move in included, and real people on the counter at any hour — on a price that doesn't shift.
See the plans