Should I change /wp-admin to something else to increase website safety?

BlueBuzzy

BlueBuzzy

Senior Member
Joined
Jun 7, 2018
Messages
898
Reaction score
299
Wordfence detects a ton of sign up tries from all over the world. What's the best way to keep my site safe? Already have CloudFlare and wordfence - should I change my /wp-admin because it's such a common path to the admin panel? How can I do that - probably using a plugin or?

Also, are there other good ways to increase security such as adding the 2-factor authentication in wordfence premium?

All ideas are welcome and thank you!
 
Advertise on BHW
I would rename "wp-admin" into somethine really random AND create an empty "wp-admin" afterwards. :-)

Additionally I would setup a hardware firewall to block known intruder networks.
 
What? No one use wp-admin in 2019, use wp hide plugin, it will do the job.
 
GermanBotMafia said:
I would rename "wp-admin" into somethine really random AND create an empty "wp-admin" afterwards. :)

Additionally I would setup a hardware firewall to block known intruder networks.
Click to expand...
Is there like an public list of IPs that are known as bad?
 
I had such an issue a year agao with a wordpress site. Even after changing wp-admin to something else the login attempts were still there. I found out that deleting the xmlrpc.php did the job. Maybe this helps
 
Just hide the wp-admin page or if you don't want to hide it, restrict to 2 or 3 login attempts and then block for 1 month.
 
how can change wp-admin to another format? looking for the answer
 
BlueBuzzy said:
Wordfence detects a ton of sign up tries from all over the world. What's the best way to keep my site safe? Already have CloudFlare and wordfence - should I change my /wp-admin because it's such a common path to the admin panel? How can I do that - probably using a plugin or?

Also, are there other good ways to increase security such as adding the 2-factor authentication in wordfence premium?

All ideas are welcome and thank you!
Click to expand...

Yes. From someone who sometimes dorks for Wordpress sites and checks to see if wp-admin exists or not and also, wpscan searches for that in the default scan, from experience I do suggest changing 'wp-admin' to something that is more obscured. Also, it is common knowledge and like default passwords, you should change it. <//3
 
I can't hurt. It will hide it for noobs but hackers will find the right URL so change url and a strong PW. I always use a minimum of 18 character for WP and another one for my DB.

Something like:
Code: 
#h7rSU.&V>Y%kuX">n1[
You can use https://passwordsgenerator.net/ if ur lazy or just randomly type something.
 
http://www.codelist.cc/plugins/236355-hide-my-wp-v561-amazing-security-plugin-for-wordpress.html

The solution to secure your WP Website from most common attacks. Hide my WP prevent people and bots to know your website runs on Wordpress

Note: the above link is not mine, only trying to be of help
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top