Steps to rename wordpress wp-login.php file

It’s all about the simplest way to secure your wordpress login page. As you might already know, you can access the dashboard through : /wp-admin, /wp-login.php, or /wp-admin/index-extra.php

People can easily enter the login page through the urls above. We need to hide them all to minimize the security risk for hacking attempt to the login page. This method will only need 3 simple steps. Kindly follow these instructions carefully :

1. Find and replace the text “wp-login.php” on /wp-login.php file with “hidden-login.php”
2. Find and replace the text “wp-login.php” on /wp-includes/general-template.php file with “hidden-login.php” except this line on wp_login_url function, like :
   $login_url = site_url('wp-login.php', 'login'); for new version, or
   return site_url("wp-login.php$redirect",'login'); for old version
   just let it be the way it is, otherwise when you go to wp-admin, it will redirect to “hidden-login.php”
3. Rename /wp-login.php file into hidden-login.php

 Now you can access the login page at /hidden-login.php, no more /wp-admin, /wp-login.php nor /wp-admin/index-extra.php. You can also change “hidden-login.php” with anything you want.