Changing the login URL without altering WordPress core
WPS Hide Login changes the login address without modifying WordPress core files. It intercepts page requests rather than renaming files or adding rewrite rules; the usual wp-login.php and wp-admin paths become inaccessible, and deactivation restores the previous state. This is a reversible change, but administrators need to keep the new address accessible.
Login forms, multisite and caching behavior
Core login workflows and supported integrations continue to function, though custom links and caching need attention.
- Login workflows: Registration, password recovery, login widgets and expired sessions continue to work.
- Form integrations: The plugin lists compatibility with BuddyPress, bbPress, Jetpack and User Switching; themes or plugins with hardcoded wp-login.php links are unsupported.
- Multisite: Network activation sets a default login slug, while individual sites can choose their own.
- Page caching: Exclude the new login URL from page caching unless the site uses WP Rocket. Sites using other caching plugins need to adjust their cache exclusions.
Recovering access and sharing registration links
Bookmark the new login URL and use these steps if access or account links need attention.
- Find a forgotten URL: Check the whl_page value in the database’s options table, or in sitemeta on multisite if it is not in options.
- Restore the default login path: Remove the wps-hide-login plugin folder, then log in through wp-login.php and reinstall the plugin if needed.
- Share account links: Give users registration and password-recovery links using the new slug, such as /login?action=register or /login?action=lostpassword. The plugin does not redirect the default WordPress URLs, so sharing those will not work as intended.
If a lockout persists, check for .htaccess changes or an outdated WordPress MU configuration; these are identified as possible causes. Keeping recovery instructions with site administration records can reduce disruption.
A widely adopted plugin with limited support assurances
Its broad adoption and strong user ratings are balanced by modest support assurances.
WPS Hide Login is among the directory’s most widely installed plugins, with an excellent rating across many reviews, and was last updated 77 days ago. That profile suggests a well-established tool, though the update cadence is worth considering for sites that prioritize frequent maintenance.
The maintainer says the plugin is maintained but does not guarantee free support, and the listed support threads have a 0% resolution rate. It is a better fit for site owners comfortable following self-service recovery guidance; teams that need dependable support should weigh that trade-off before relying on it.
