by Ben Treder on WordPress.org
Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

Settings page showing the default login slug (/wp-login.php)
Secure Login Shield helps you lock down your WordPress login page.
By default, WordPress exposes /wp-login.php and /wp-admin/. Bots hammer these URLs every day.
This plugin gives you a private login slug (e.g. /dragon-lair) and hides the default login endpoint:
/wp-login.php until you change it./wp-login.php shows a 404 Not Found (stealth mode)./wp-admin/ are redirected to the homepage.Made with ❤️ by Ben Treder
/dragon-lair, /control-center, /secret-gate)/wp-login.php see “Not Found”/wp-admin/ (logged out) → homepage