Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records VanishLogin version 1.0.2 as active, updated 2d ago and tested up to WordPress 7.1.
Overview
About this plugin
Hide your login page. Starve the bots.
php on every WordPress site — thousands of password guesses a day, around the clock. They can only attack a door they can find. php to a custom login URL that only you and your team know.
VanishLogin moves that door. php stops answering anyone who is logged out. Your access logs go quiet, your server stops wasting resources on bot traffic, and password guessing has nowhere to land.
What it does
Hide your login page — change wp-login.php to any secret slug, with live validation, a live URL preview, and one-click copy
Choose what intruders get — logged-out visitors hitting wp-login.php or wp-admin receive a 404, your homepage, or a custom URL of your choice
Intruder IP log — every hit on the old login page, grouped by IP with hit counts and last-seen times; block or unblock any IP in one click (blocked IPs are refused everywhere, including the secret login URL — and you can never block your own IP)
Modern settings dashboard — protection status pill, blocked-intruder hit counter, and your full login URL at a glance
Never get locked out — a one-line emergency bypass in wp-config.php disables protection instantly, and logged-in users are never blocked
Plays well with others — password reset, logout, registration, and re-auth links keep working; pairs perfectly with 2FA and limit-login-attempts plugins
How it works
Turn protection on and pick your secret slug.
Share the new login URL with your team — bookmark it.
Bots keep knocking on wp-login.php and get a 404. You log in at your secret address like always.
Built like a security tool should be
Small codebase, no tracking, no telemetry, no upsells — 100% free under the GPL
Nothing leaves your server; the intruder log is stored in your own database
Honest about its layer: hiding the login page removes the target, and pairs with 2FA and login-attempt limiting for defense in depth
Built by WordPress security specialist Md Jahid Bin Sabit.
Credits
VanishLogin is designed, built, and maintained by Md Jahid Bin Sabit — WordPress security specialist.
Topics listed for this plugin in the WordPress.org directory.
custom login url
hide login
login security
wp login php
wp login.php
rename
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 5.8 · PHP 7.4
Update activity30 Oct 20262d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
