Should I change /wp-admin to something else to increase website safety?

[BlueBuzzy]

Wordfence detects a ton of sign up tries from all over the world. What's the best way to keep my site safe? Already have CloudFlare and wordfence - should I change my /wp-admin because it's such a common path to the admin panel? How can I do that - probably using a plugin or?

Also, are there other good ways to increase security such as adding the 2-factor authentication in wordfence premium?

All ideas are welcome and thank you!

 

[GermanBotMafia]

I would rename "wp-admin" into somethine really random AND create an empty "wp-admin" afterwards.

Additionally I would setup a hardware firewall to block known intruder networks.

 

[Nut-Nights]

What? No one use wp-admin in 2019, use wp hide plugin, it will do the job.

 

[BlueBuzzy]

What? No one use wp-admin in 2019, use wp hide plugin, it will do the job.

You won't believe it but my main competitor with 100k+ traffic still does lol

 

[nour123]

I would rename "wp-admin" into somethine really random AND create an empty "wp-admin" afterwards.

Additionally I would setup a hardware firewall to block known intruder networks.

Is there like an public list of IPs that are known as bad?

 

[Met]

I had such an issue a year agao with a wordpress site. Even after changing wp-admin to something else the login attempts were still there. I found out that deleting the xmlrpc.php did the job. Maybe this helps

 

[Advanced]

Sure thing u can...

 

[Steven McStevenson]

Just hide the wp-admin page or if you don't want to hide it, restrict to 2 or 3 login attempts and then block for 1 month.

 

[Seo Licious]

how can change wp-admin to another format? looking for the answer

 

[MisterF]

how can change wp-admin to another format? looking for the answer

I think @Jeepy posted a thread or a post about this quite recently.

 

[RayChand]

You won't believe it but my main competitor with 100k+ traffic still does lol

TBH it doesnt matter, use a very strong password, dont use default username "admin", keep the wp, themes and plugins updated, nobody can break into your wordpress

 

[Seo Licious]

Thank you, sir, but unfortunately, I can't get the thread link. can you help me?

I think @Jeepy posted a thread or a post about this quite recently.

 

[f0ur]

Wordfence detects a ton of sign up tries from all over the world. What's the best way to keep my site safe? Already have CloudFlare and wordfence - should I change my /wp-admin because it's such a common path to the admin panel? How can I do that - probably using a plugin or?

Also, are there other good ways to increase security such as adding the 2-factor authentication in wordfence premium?

All ideas are welcome and thank you!

Yes. From someone who sometimes dorks for Wordpress sites and checks to see if wp-admin exists or not and also, wpscan searches for that in the default scan, from experience I do suggest changing 'wp-admin' to something that is more obscured. Also, it is common knowledge and like default passwords, you should change it. <//3

 

[Billy Batts]

I can't hurt. It will hide it for noobs but hackers will find the right URL so change url and a strong PW. I always use a minimum of 18 character for WP and another one for my DB.

Something like:

#h7rSU.&V>Y%kuX">n1[

You can use https://passwordsgenerator.net/ if ur lazy or just randomly type something.

 

[Validkingval]

http://www.codelist.cc/plugins/236355-hide-my-wp-v561-amazing-security-plugin-for-wordpress.html

The solution to secure your WP Website from most common attacks. Hide my WP prevent people and bots to know your website runs on Wordpress

Note: the above link is not mine, only trying to be of help

 

[royalredover]

Yes. But the point here is to use a strong password.