tawnya sutherland

How do I secure wp-admin logins?

8 posts in this topic

One of my wordpress installs was attacked with brute-force logins to the wp-admin section of the WP install. While they didn't get in, it did slow down my server while they were trying to hack it as I got notices from my cpanel regarding same. So I contacted my host and they said this: "We recommend either installing a plugin to hide the login page or restricting access to the login page to certain IPs."

So my question is, does anyone know any plugins that hide the login page? Restricting the IPs isn't really as important to me as these hackers have ways of easily changing their IPs.

1 person likes this

Share this post


Link to post
Share on other sites

Why didn't I know about this lol.

One thing we can do is change the standard login page to another URL.

There's also some plugins that we can install that add a captcha.

I am doing a lockdown on a client's site so will send you what I do so we can do same here. 

1 person likes this

Share this post


Link to post
Share on other sites

Yes, if you were blocking their IP addresses, then it might be futile because they are always changing their IPs. But what if you were only allowing whitelisting IPs such as yours and Danielle's entry to the login page? A block everyone else. Guilty until proven innocent? lol

But on the note of the limiting logins, I believe I-themes security has a way of limiting login attempts AND hiding the login page.

2 people like this

Share this post


Link to post
Share on other sites
On 5/21/2017 at 0:03 PM, markofapproval said:

Yes, if you were blocking their IP addresses, then it might be futile because they are always changing their IPs. But what if you were only allowing whitelisting IPs such as yours and Danielle's entry to the login page? A block everyone else. Guilty until proven innocent? lol

But on the note of the limiting logins, I believe I-themes security has a way of limiting login attempts AND hiding the login page.

Interesting we need to look into this then Mark. Is there a specific plugin or way to whitelist our IPs for the login page only? Saying that it may turn into a PIA when traveling but I could whitelist those IPs if I knew how to do it.

Share this post


Link to post
Share on other sites

Hi. I use a plugin called WPS Hide Login

https://wordpress.org/plugins/wps-hide-login/

This plugin does just one thing. It makes it easy to use a custom URL rather than the standard login URL. Once this plugin is installed and activated, /wp-admin and /wp-login.php are inaccessible, replaced with a custom URL of your choosing.

I find this easier than trying to re-direct the php admin page in my cpanel.

1 person likes this

Share this post


Link to post
Share on other sites

Good idea!

18 hours ago, susanne c said:

Hi. I use a plugin called WPS Hide Login

https://wordpress.org/plugins/wps-hide-login/

This plugin does just one thing. It makes it easy to use a custom URL rather than the standard login URL. Once this plugin is installed and activated, /wp-admin and /wp-login.php are inaccessible, replaced with a custom URL of your choosing.

I find this easier than trying to re-direct the php admin page in my cpanel.

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Want to Become a VA?
    Invest in The VAC!
    How Do YOU Startup A



    Are You a VAinsider?
    Virtual Assistant Organization Association
    Upgrade Your FREE Account & Receive Today...
    * Access to Our Job Board *
    * VA Training Webinars*
    * Group Coaching *
    * Monthly MotiVAtor *
    * Private Mastermind Area *
    * Business Templates *
    * Contracts & Forms*
    *System Sheets & eBooks *
    * Seminar Archives *
    * Plus VAinsider Perks! *
    UPGRADE HERE


    Virtual Assistant Organization Association

    Virtual Assistant Organization Association



















    HootSuite - Social Media Dashboard

    Affordable online backup for your small business

    Virtual Assistant Organization Association

    Click to see your AD here!


    Cool Virtual Assistant of the month!

    Get Your FREE VA
    Member Button Here!