Facebook reviews by long-term WPX customers

Protect Your WP Admin Area

In the following article, we will explain how to protect your WP Admin area. This is an essential step to maintain site security.

Bots are constantly trying to guess your password by repeatedly hitting your WP Admin area with different credentials, which can slow down your website.

We are constantly monitoring activity on your URL for bot attacks. If you are using WordPress for some online class room, repeated attacks might make your website temporarily inaccessible for your users, which is not something anybody wants to happen. This is in line with a new security feature we have implemented, in which a site will be temporarily locked if logins fail in rapid succession.

To help prevent such a thing from happening, we will install a small plugin in just a few short steps. This will help prevent bots from guessing your credentials and will ensure your users can continue to work without issues:

1.    We will need to go to the ‘Plugins’ menu of your WordPress installation (in the WP Admin area).
2.    Navigate to ‘Add New’ and enter in the search box ‘WPS Hide Login’ as shown in the screenshot below:

 

 

3.    Once the installation is complete, click on the Activate button and you will most likely be redirected to the plugins list where you can see that the plugin has activated successfully.
4.    Now we only need to navigate to Settings -> General, then to the bottom of the page so we can change our WP Admin URL, which you can see in the screenshot below:

 

 

5.    If everything goes well, you should get a successful message at the top telling you to bookmark your new URL. It’s a good idea to do that!
6.    Test to see if everything went well, in our case, we have changed /wp-admin/ with /protected/. In the following screenshot, you’ll see that we are successfully accessing the WP Login via /protected/ instead of /wp-admin/ which from now on will start throwing a 403 Forbidden Error or a “This has been disabled” message.

 

 

These steps will ensure that your WP Admin area is kept secure. If you would like to know more about how to keep your site safe, you can find other articles under the Security section of our Knowledgebase.

 

Keep in mind that this is only a recommendation to strengthen the security of your website.

If you have any issues, please raise a support ticket here:

https://wpxhosting.com/tickets/new/