SP Move Login
Active Installs
6,000+
Last Updated
December 2, 2025
First Released
June 4, 2013
Download History (Last one month)
Move Your Login Page
Tired of bots finding your WordPress login page? SP Move Login allows you to change your login URL to protect it from automated attacks and brute force attempts.
This plugin contains the Move Login module from SecuPress, a comprehensive WordPress security plugin. While this plugin focuses solely on moving your login page, the full SecuPress version includes many other security features such as:
Why move your login page?
By default, WordPress login pages are located at /wp-login.php and /wp-admin/, making them easy targets for bots and attackers. SP Move Login allows you to:
- Change your login URL to a custom slug
- Protect your registration page (if enabled)
- Block access to the default login pages
- Display custom error messages or redirect to a custom page when someone tries to access the old login URL
Features:
- Simple and easy to use
- Change your login URL with just a few clicks
- Works with pretty permalinks
- Compatible with multisite installations (includes Single Sign-On support)
- Custom error messages for blocked access
- Redirect to custom page option
- Lightweight – focused solely on moving your login page
Note: This plugin requires pretty permalinks to be enabled. You can activate them in Settings > Permalinks.
For more advanced security features, check out the full SecuPress version.
- Upload the plugin files to the
/wp-content/plugins/sp-move-logindirectory, or install the plugin through the WordPress plugins screen directly. - Make sure you have pretty permalinks enabled (Settings > Permalinks – any setting except “Plain”).
- Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings > Move Login to configure your new login URL.
SP Move Login allows you to change your WordPress login URL from the default /wp-login.php to a custom URL of your choice. This helps protect your site from automated bots and brute force attacks that target the default login page.
By default, every WordPress site has its login page at the same location (/wp-login.php), making it an easy target for automated attacks. By moving your login page to a custom URL, you make it much harder for bots to find and attack your login page.
Yes! SP Move Login is fully compatible with WordPress multisite installations and even includes Single Sign-On (SSO) support for multisite networks.
If you get locked out, you can use the emergency bypass by adding this constant to your wp-config.php file:
define( ‘SFML_ALLOW_LOGIN_ACCESS’, true );
Remember to remove this constant after you regain access!
SP Move Login works best with Apache servers. For Nginx servers, you’ll need to manually add the rewrite rules to your server configuration. The plugin will provide you with the necessary rules.
Yes, SP Move Login can work alongside other security plugins, but we recommend using the full SecuPress version for a complete, integrated security solution.
Check out the full SecuPress version which includes many more security features like firewall, malware scanning, backups, and more.
Changelog
2.6
- 02 December 25
- New Owner, thanks Greg 🙂 Initial release of SP Move Login
- Extracted Move Login module from SecuPress
- Compatible with WordPress 6.7+ and PHP 8.0+
" width="120" height="120">
Available Versions
| Version | Download | Type |
|---|---|---|
| 2.6 | Download | Stable |
| 2.5.3 | Download | Stable |
| 2.5.2 | Download | Stable |
| 2.5.1 | Download | Stable |
| 2.4.3 | Download | Stable |
| 2.4.2 | Download | Stable |
| 2.3 | Download | Stable |
| 2.0.2 | Download | Stable |
| 1.1.4 | Download | Stable |
| 1.0.1 | Download | Stable |
| 0.1.1 | Download | Stable |
| 0.1 | Download | Stable |
| Development | Download | Trunk |
