Grade B

WPS Hide Login

Name: WPS Hide Login
Rating: 3.6 (2111 reviews)
Author: Remy Perona

⤓ Download v1.9.18 on WordPress.org ↗

by Remy Peronaupdated 2026-01-12🌿The Dependable Sort

Hide your login from bots or accidentally hide it from yourself.

HealthyDecliningPoor rating

60/100

It reduces bot traffic but carries a real risk of locking you out.

Loved20/40

Trustworthy7/15

Fair & Honest14/15

Maintained15/18

Momentum4/12

✂️

You might not need this plugin. Its core job is small enough to live in your theme's functions.php.

Show the snippet

// Change this to your desired secret login slug
define( 'CUSTOM_LOGIN_SLUG', 'my-secret-login' );

add_action( 'init', function () {
    $request = parse_url( $_SERVER['REQUEST_URI'], PHP_URL_PATH );
    $slug     = CUSTOM_LOGIN_SLUG;

    // Block direct access to wp-login.php and wp-admin (for non-logged-in users)
    if ( preg_match( '#/wp-login\.php#', $request ) ) {
        if ( ! isset( $_GET[ $slug ] ) && strpos( $_SERVER['REQUEST_URI'], $slug ) === false ) {
            wp_redirect( home_url( '/' ) );
            exit;
        }
    }
} );

add_filter( 'login_url', function ( $url ) {
    return home_url( CUSTOM_LOGIN_SLUG );
}, 10 );

add_action( 'init', function () {
    $slug    = CUSTOM_LOGIN_SLUG;
    $request = trim( parse_url( $_SERVER['REQUEST_URI'], PHP_URL_PATH ), '/' );

    if ( $request === $slug ) {
        require_once ABSPATH . 'wp-login.php';
        exit;
    }
} );

Keep in mind:The plugin provides a settings UI to configure the slug without editing code; this snippet requires hardcoding the slug directly.

More plugins you can skip →

Active installs

~2.5 million

our estimate · wp.org shows 2.0M+

Rating

4.8★

2,111 ratings

Trend · vs a year ago

-15%

Declining

6,628 → 5,650 installs/day

What to watch out for

MINORverified rating is 3.60★

Downloads over time

real new installs per day · release spikes shown separately from the trend

2025-04-302025-08-082025-11-162026-02-232026-06-03

organicrelease spikerelease tailorganic trend · 14d rolling median

Declining · -15% in the last year

6,628/day a year ago→5,650/day today

Reviews

what people actually say

WPS Hide Login is a lightweight, easy-to-configure plugin that reliably reduces bot traffic to the default login URL, but a recurring and serious caveat is that activation can break login/logout entirely on some setups, leaving admins locked out of their own sites.

What people like

+Effectively reduces automated brute-force attempts by hiding the default wp-login.php URL from bots×6
+Quick and easy to set up with minimal configuration required×7
+Lightweight with no noticeable performance impact×3

Common complaints

−Activating the plugin can completely break login or logout, leaving admins locked out and requiring manual server-side deactivation×4
−Custom login URL can redirect to a 404 error instead of the login page, making the site inaccessible×3
−Very limited settings and no advanced security features, making it feel too basic for users wanting more control×4
−At least one user reports search engines discovering the new secret login URL within hours, undermining its core purpose
−Some sites continue to receive login attempts at the original wp-admin URL even after the plugin is active

Review trustReviews look organic

3.60★Verified rating — holds steady vs the raw 4.80★
8%One-shot reviewers — most reviewers are active community members

Reviews per month · 5★ vs lower

2023-07-202025-01-102026-06-04

5★ reviews1–4★ reviews

All-time ratings · 2,111 total

5★

1,987

4★

3★

2★

1★

Latest reviews · 90 analyzed

2026-06-03★★★★★Hides Login, Works Fine rebeca181-shot
2026-05-26★★★★★Stopped the bots fast Hakeem
2026-05-20★★★★★Bot Hits Dropped Hard treyvon1
2026-05-14★★★★★Must Have Security jennifer254
2026-05-05★★★★★Simple Login Fix urmirun
2026-04-24★★★★★Simple Security jazmyn30
2026-04-21★★★★★Helpful but Limited iyanasoria4
2026-04-16★★★★★Simple but limited tyriqsuth
2026-03-30★★★★★Simple & Useful seamusrider
2026-03-26★★★★★Simple, effective, and essential for basic WordPress security mawuart

Releases

recent versions from WordPress.org SVN

2026-01-12v1.9.18
2025-04-11v1.9.17.2
2024-10-09v1.9.17
2024-10-09v1.9.17.1
2024-06-27v1.9.16.7
2024-06-25v1.9.16.6
2024-06-24v1.9.16.5
2024-06-21v1.9.16.4

Alternatives to WPS Hide Login

Top Security plugins, ranked by score.

NinjaFirewall (WP Edition)150k installs

All-In-One Security (AIOS)1.5M installs

Loginizer1.5M installs

BulletProof Security25k installs

BBQ Firewall150k installs

Limit Login Attempts Security4.0M installs

For developers & the curious

the raw signals behind the grade — none of this is on the friendly summary above

Download signals

Baselines are computed on organic days only — release spikes and their tails are excluded, so they're not inflated by the auto-update wave.

5,527

Baseline · median of last 7 organic days

5,641

Prior 7-day baseline

3,805

Floor · 25th percentile over 14 days

5,788

Latest day · 2026-06-03(organic)

-2.0%

Week-over-week organic trend

Review signals

Concentration and drive-by metrics drive the review-burst and fake-review flags. 30–40% solo reviewers is normal; we only flag the extremes.

Max month share · biggest single 30-day window

0.93

Distribution CV · <0.6 even, >1.5 bursty

53%

5★ share in analyzed sample

Solo reviewers · only this one wp.org activity

+117%

Volume velocity · last 6mo vs prior 6mo

3.61 → 3.60★

Sample avg · raw → solo-filtered