SPP Custom Login URL Obfuscator

Description

SPP Custom Login URL Obfuscator is a robust security utility designed to defend WordPress websites against automated brute-force attacks and unauthorized access attempts. Standard WordPress installations expose sensitive entry points like wp-login and wp-admin by default, making them primary targets for malicious bots and hackers. This plugin mitigates this vulnerability by intercepting requests to these standard paths during the early stages of the WordPress initialization hook. By hiding the default administrative doors and replacing them with a custom slug of your choosing, any unauthorized traffic trying to access the default paths is met with a clean page not found response, effectively rendering your login portal invisible to attackers.

Features

• › Native WordPress integration
• › Easy rule configuration
• › Create offers in seconds
• › Compatible with major themes
• › Automatic discount handling
• › Works on cart & order totals
• › Boost sales, delight customers
• › Lightweight – no bloat

Reviews (2)

Support

Setting up the plugin is straightforward and takes effect immediately after standard installation and activation through the WordPress admin panel. Once activated, you navigate to the dedicated settings page to input your highly unique, secret login slug and save the changes. From that moment forward, accessing the standard login paths will result in a standard page not found response, and you must use your newly defined custom address to access the dashboard. To log back in or manage the site, you simply navigate to your main domain followed by your custom slug, which instantly renders the standard, secure WordPress login screen.

This security plugin is designed to operate efficiently within modern hosting environments running current versions of PHP and WordPress. Because it hooks directly into the core initialization process rather than modifying physical server rewrite rules like those found in custom server configuration files, it works seamlessly across Nginx, Apache, and Cloudways hosting environments. The lightweight architecture is fully compatible with major security suites, caching plugins, and translation utilities, and it will not interfere with frontend page rendering or headless and decoupled API routing

This software is released under the terms of the GNU General Public License version 2 or later, giving you complete freedom to view, modify, and distribute the codebase. The plugin can be installed and utilized across an unlimited number of personal, client, or commercial web projects with no hidden activation fees or ongoing licensing subscriptions. Since all request interception, slug verification, and security routing happen directly on your local server, no website access patterns or sensitive login configurations are ever sent to external APIs or third-party tracking services.