# How to change your admin URL in WordPress

The administration area of WordPress projects is **by default** accessible via *my-domain.com/wp-admin*, which is of course known to cybercriminals. They therefore use the WordPress “wp-admin” URL all too readily as a point of attack. To protect yourself from this and other attack patterns, you can **rename** or **disguise** the default path to your WordPress admin login. We’ll show you how to do that.

## This is why you should change the WP admin login

The fact that the WP login page is accessible by default via the sample URL *my-domain.com/wp-admin* does not in principle mean that your WordPress project is highly compromised. If you have changed the admin credentials, the WP admin login is also only possible for you.

The big problem with the default URL is that **it attracts cybercriminals in the first place**: Whether WordPress is the basis of your website can be determined in seconds - and the check to see if you’re still using the common default URL for your project happens just as quickly. With a [brute force attack](https://www.ionos.com/digitalguide/server/security/brute-force-attack-definition-and-protective-measures/ "Brute force attack: definition and protective measures") or other measures, the attack on your login could start directly afterwards.

An individual WordPress admin login is therefore recommended - and quickly and easily implemented with appropriate WordPress [plugins](https://www.ionos.com/digitalguide/server/know-how/what-is-a-plug-in/ "What is a plug-in?").

## WordPress: Change WP admin login with the plugin Rename wp-login.php

The lightweight and free plugin [Rename wp-login.php](https://wordpress.org/plugins/rename-wp-login/ "WordPress Plugin Directory: Rename wp-login.php") by Ella van Durpe is a bit older but serves its purpose flawlessly even with current WordPress installations. We have tested the WordPress extension with version 5.8.1. How exactly the WP login page customization works, you can read below.

### Step 1: Install the plugin via the WordPress backend

The first step is to install the security plugin via the backend of your WordPress project. To do this, log in and click on “**Plugins**” and “**Install**” in the left side menu one by one. Use the search function to search for “Rename wp-login.php” and click “**Install Now**” once the plugin appears.

[![Image: WordPress Backend: Plugin Installation](https://www.ionos.com/digitalguide/fileadmin/_processed_/3/d/csm_wordpress-backend-plugin-installation-wp-admin_a7136a8d2c.webp "WordPress Backend: Plugin Installation")](https://www.ionos.com/digitalguide/fileadmin/DigitalGuide/Screenshots_2022/wordpress-backend-plugin-installation-wp-admin.png) WordPress Backend: Plugin Installation       ###  Step 2: Change WP admin URL in WordPress

Once you activate the plugin following the installation via the button of the same name, you can access it in the side menu. To do so, press “**Settings**” and then “**Permalinks**”.

Scroll down to the “**rename wp-login.php**” section and assign a new, secure name for the login URL, such as *c2xlp-3*.

[![Image: Customize WP login URL with Rename wp-login.php](https://www.ionos.com/digitalguide/fileadmin/_processed_/a/7/csm_wp-login-url-rename_22125c4c1c.webp "Customize WP login URL with Rename wp-login.php")](https://www.ionos.com/digitalguide/fileadmin/DigitalGuide/Screenshots_2022/wp-login-url-rename.png) Customize WP login URL with Rename wp-login.php       ---

### Tip

Don’t use typical names like “login”, “credentials”, “admin”, or “backend” for the WordPress admin login URL. These are also known to criminals and therefore offer little protection.

---

### Step 3: Access WP admin login under new address

Click on “**Apply changes**” to confirm your new login URL. In the future, you will reach your WordPress admin at the new URL - in our case, with the URL segment *c2xlp-3* you just defined.

[![Image: WP login page with new custom URL](https://www.ionos.com/digitalguide/fileadmin/_processed_/3/c/csm_wp-login-page-custom-url_197b9eadfe.webp "WP login page with new custom URL")](https://www.ionos.com/digitalguide/fileadmin/DigitalGuide/Screenshots_2022/wp-login-page-custom-url.png) WP login page with new custom URL       ##  Changing WP admin URL is not possible: Solution .htaccess file

If the WordPress admin login cannot be changed, it is often because your WordPress installation does not allow the **definition of speaking URLs**. In this case, before you customize your URL with the plugin, you need to manually add the following mod\_rewrite rules to your [.htaccess file](https://www.ionos.com/digitalguide/hosting/technical-matters/htaccess-tricks/ ".htaccess tricks"):

```none
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
```


This is a markdown version of: [https://www.ionos.com/digitalguide/hosting/blogs/wordpress-rename-wp-login/](https://www.ionos.com/digitalguide/hosting/blogs/wordpress-rename-wp-login/) for AI/LLM consumption.