Turn it on
- Go to Settings → Plinth → Sign-in and switch on Use a custom login address.
- Type an address, such as
team-access, or choose Suggest. Plinth checks it as you type: it has to be free, and easy guesses like “login” or “admin” get a warning. - Tick “I’ve saved the new address” and confirm.
What changes
- People sign in, reset their password and log out at the new address.
- Anyone signed out who opens wp-login.php or wp-admin gets your site’s “page not found”. People who are already signed in aren’t affected.
- Guessing /login, /admin or /dashboard doesn’t lead to it, and neither does a made-up password reset link.
- Every administrator gets an email with the new address and how to get back in if it’s lost.
- Forms, scheduled tasks and other things WordPress does in the background keep working.
If you’re locked out
Add this line to wp-config.php, or rename the plinth folder in wp-content/plugins. Either puts the sign-in page back at wp-login.php.
define( 'PLINTH_LOGIN_SLUG', false );
Turn it off
Switch it off in Settings → Plinth → Sign-in. The sign-in page is back at wp-login.php straight away, and the administrators get an email.
When Plinth leaves it alone
- If another plugin already moves the login, such as WPS Hide Login, Solid Security or All-In-One Security, Plinth stands down and the card says so.
- It isn’t available on multisite yet.