Custom login URL
Moves wp-login.php to a custom address, so scripts that only know the default path never reach a login form at all.
What it does
Same login page, somewhere else
Custom login URL is a Vectro security feature that moves wp-login.php to a slug of your choosing and returns a 404 at the default address, so automated scripts never reach a login form.
Every WordPress site puts its login form at the same place. That predictability is what makes automated attacks cheap: a script does not need to find your login page, it already knows where it is. This feature lets you move it.
You pick a slug – something like /enter/ or /admin-login/ – and Vectro serves the login form there instead. Requests to wp-login.php return a 404, exactly as though the file were not there.
If you forget the slug, rename or remove the Vectro plugin folder over FTP or your host file manager. With the plugin inactive, wp-login.php works normally again. Deactivating Vectro from wp-admin also switches the custom login URL off, so it stays off until you turn it back on.
Why it matters
Most login attacks never look past the default path
Brute force tooling works at scale, which means it optimises for the common case. The overwhelming majority of scripts request wp-login.php or wp-admin directly and move on if neither answers. Renaming the path does not make a weak password strong, but it removes your site from the pool that generic scanners can even attempt.
The practical effect shows up in your logs and your server load. Failed login noise drops sharply, which also makes the attempts that remain far easier to notice.
How to use it
Choose a slug and save it somewhere
Technical detail
How the rename is handled
Vectro intercepts the request early, before WordPress resolves wp-login.php. Requests to your chosen slug are routed to the standard login handler, so the form, authentication flow, cookies and redirects all behave exactly as WordPress intends. Nothing about the authentication itself is altered.
Requests to the original wp-login.php are answered with a 404 rather than a redirect, because a redirect would confirm that the file exists and simply point a scanner at the new location.
admin-ajax.php, admin-post.php and wp-cron.php, so AJAX, form posts and cron keep working.Compatibility
Vectro detects these and steps aside
You can override any automatic deferral from the Compatibility panel in Vectro’s dashboard if you would rather Vectro handle it.
Questions
Frequently asked
What does changing the WordPress login URL do?
Changing the login URL moves the WordPress login form to a custom address of your choosing and returns a 404 at wp-login.php. Automated scripts that only know the default path never reach a login form at all.
Does Vectro custom login URL work with WPS Hide Login?
No – if WPS Hide Login is active, Vectro detects it and disables its own custom login URL automatically. WPS Hide Login controls the login path instead, so only one plugin ever rewrites it.
How do I change my WordPress login URL in Vectro?
Go to Vectro > Security in wp-admin, toggle Custom Login URL on, then enter the slug you want such as enter or admin-login. Bookmark the new address before you log out, and avoid predictable words like login or admin.
Is the Vectro custom login URL free or Pro?
Yes, The Vectro custom login URL is free. It is included in the free Vectro plugin on WordPress.org with no account required.
What happens if I deactivate Vectro with a custom login URL active?
Vectro switches the custom login URL off when the plugin is deactivated, so wp-login.php works normally again. If you forget your slug and cannot reach wp-admin, rename or remove the Vectro plugin folder over FTP or your host file manager to get the same result.
Related features
Harden the login page further
Vectro Pro adds two-factor authentication for a second layer of login security. See Pro plans
Download Vectro free on WordPress.org
27 features across Security, Performance and Maintenance. No account required, no expiry, unlimited sites.