Block wp-login — WordPress Authentication Plugin
by Oliver Campion · WordPress.org page · Website
Block wp-login has 600+ active installs on WordPress.org and 22,338 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 13, 2026, tested up to WordPress 7.1.
Block wp-login at a glance
Is Block wp-login well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Choose your own secret login slug or generate a random one
- Block direct access to the default wp-login.php endpoint with a 403 response
- Continue to support password resets, registration and WordPress administration email verification through the secret login URL
- Rebuild the secret login file after a WordPress core update
- Optionally email administrators when the login URL changes
- Optionally notify the site owner when an administrator signs in from an IP address that is not on the known-IP list
Block wp-login reviews and ratings
9 reviews on WordPress.org, with the most recent ones as their authors posted them.
9 reviews
- 5★
-
8
- 4★
-
0
- 3★
-
0
- 2★
-
1
- 1★
-
0
-
Best of Breed
After using other “hide login” alternatives with varied crappy results, webd’s Block wp-login actually works well and does what it needs to do without challenging the admin. If you want to hide your login - this is it.
STIJL -
Turned against me after 2 months
The customized login URL stopped working, leading to a "403 Forbidden" page and locking me out of my site. I had to resolve the situation through my host, after which I got back into my dashboard and deactivated this plugin (which, as of this writing, hasn't even been updated in 4 months). A highly inconvenient experience following several weeks of relatively smooth performance. User beware.
ktk77 -
Found It!
After being abandoned and not updated in 5 years, SF Move Login plugin finally started throwing me errors, started a quest to find another login security plugin written as smart or smarter than that little gem ... FOUND IT! Really love your approach here, Scientifically Whitty! 5-Stars ALL DAY LONG! Thank you and Best Wishes!
Jimmy Lee -
Lightweight and superb
This plugin does exactly what I need it to do, it hides my login page, and doesn't carry extra weight or complexity. I added this after I discovered a ton of (unsuccessful) attempts to hack into my site through the login process (in addition to requiring all my users to update their passwords to something much stronger). I realize where there is a will there is a way and I'll still be at risk if one or more of my *users* gets hacked and their saved login link and credentials get stolen, but I sure sleep better at night now knowing that my site is just a bit safer.
TrishaM -
Great protection against hackers
Adds a reassuring additional level of security against hackers
andybull -
A valuable tool
A valuable tool to combat security issues facing WordPress users.
f5nn9s3f8
Where Block wp-login ranks on WordPress.org
The rankings we track that Block wp-login appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best Authentication Plugins | #49 in search, not tagged | #96 | – |
Details
Blocks direct access to wp-login.php and replaces it with a secret login URL to reduce brute-force traffic on Apache servers.
The full description, screenshots and every review live on the WordPress.org page.
Rankings Block wp-login competes in
Tags
- Brute Force
- custom login url
- hide login
- login security
- security
More from Oliver Campion
-
Remove "Powered by WordPress" 20,000+ installs -
Options for Twenty Seventeen 8,000+ installs -
Options for Twenty Twenty-One 6,000+ installs -
Options for Twenty Twenty 3,000+ installs
- Version
- 1.5.8
- Last updated
- Aug 13, 2026
- First published
- Apr 7, 2017
- Requires WordPress
- 5.0
- Tested up to
- 7.1
- Requires PHP
- 7.0
- Pricing
- Free on WordPress.org
Block wp-login FAQ
What does Block wp-login do?
According to its WordPress.org readme, Block wp-login offers Choose your own secret login slug or generate a random one, Block direct access to the default wp-login.php endpoint with a 403 response, Continue to support password resets, registration and WordPress administration email verification through the secret login URL, Rebuild the secret login file after a WordPress core update and Optionally email administrators when the login URL changes.
How many active installs does Block wp-login have?
WordPress.org reports 600+ active installs for Block wp-login as of September 7, 2026.
Is Block wp-login still maintained?
Yes. The last release was on August 13, 2026 and it is tested up to WordPress 7.1.
Is Block wp-login free?
Block wp-login is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does Block wp-login rank among Authentication Plugins?
Block wp-login is #96 in the WordPress.org Authentication Plugins ranking.