Description
Mamotte! Login URL Changer protects your WordPress site by replacing the default /wp-login.php with a custom URL of your choice. Unauthorized users who don’t know the secret URL will receive a 404 error or be redirected to the top page — keeping bots and brute-force attacks away from your login screen.
Key Features
- Custom login URL — Set any slug (e.g.
myloginor2024/secret) as your new login endpoint. - Flexible block behavior — Choose to show a 404 page or redirect to the site top when the original URL is accessed.
- IP whitelist — Restrict login access to specific IP addresses. Editors can register their own personal IP from the dashboard.
- Trusted device management — Skip repeated authentication challenges on devices you trust (via OTP cookie).
- Login question (story quiz) — Generate a unique story-based CAPTCHA from your own word lists (characters, places, drinks, foods, activities, items, animals). Makes login both secure and fun.
- Login screen designer — Customize the login page’s background color, button color, logo, form style, and more — all with a live preview.
- Contact form tab — Configure a built-in inquiry form displayed on the login screen.
- Access log — View a history of login attempts with IP addresses, results, and timestamps.
- Editor-safe settings — Editors (non-administrators) can update only their own IP entry via Ajax; all other settings require administrator privileges.
- Clean uninstall — All plugin data is removed from the database on deletion.
Use Cases
- Block automated brute-force attacks without a heavy security plugin.
- Add a lightweight second layer of authentication for small teams.
- Customize the login experience to match your brand.
Installation
- Upload the
mamotte-login-url-changerfolder to the/wp-content/plugins/directory, or install it directly from the WordPress Plugin Directory. - Activate the plugin through the Plugins menu in WordPress.
- Go to Mamotte! LUC in the admin menu and set your custom login slug.
- Important: Bookmark your new login URL before saving. If you forget it, you will not be able to log in.
FAQ
-
I forgot my custom login URL. How do I get back in?
-
Connect to your server via FTP/SFTP or your hosting file manager and deactivate the plugin by renaming the plugin folder (e.g.
mamotte-login-url-changermamotte-login-url-changer-off). WordPress will automatically deactivate it and restore the defaultwp-login.php. After logging in, rename the folder back and reactivate. -
Can I use a subfolder-style slug like `2024/secret`?
-
Yes. Slash-separated slugs are supported and treated as a pseudo-folder URL.
-
Which slugs are reserved and cannot be used?
-
The following slugs are blocked:
wp-login.php,wp-login,wp-admin,admin,login,dashboard. -
Does this plugin work with caching plugins?
-
Yes, but make sure your caching plugin excludes the custom login URL from caching. Add the slug to the exclusion list in your cache plugin’s settings.
-
Will the plugin work with multisite?
-
Multisite is not officially supported in the current version.
Avis
Il n’y a aucun avis pour cette extension.
Contributeurs/contributrices & développeurs/développeuses
« Mamotte! Login URL Changer » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.
Contributeurs
“Mamotte! Login URL Changer” a été traduit dans 2 locales. Remerciez l’équipe de traduction pour ses contributions.
Traduisez « Mamotte! Login URL Changer » dans votre langue.
Le développement vous intéresse ?
Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.
Journal des modifications
1.0.8
- Fixed: When the front-end and wp-admin login checks disagreed (e.g. around auth cookie expiration), accessing wp-admin could dead-end on a 404 page with no way back. It now redirects to the custom login URL instead.
1.1.7
- Added: New plugin entry for Tobidase Swipe Lightbox
1.0.6
- Fixed: Replaced conditional language branching with standard i18n function for proper translation support.
- Removed: Deleted the languages folder as translation files are no longer bundled.
1.0.5
- Fixed: Corrected broken promotional link on the settings page.
1.0.4
- Improved: Moved SMTP enable toggle and test email button to the bottom of the SMTP settings section.
- Added: Separate wp_mail test email button above SMTP settings for quick delivery check before SMTP configuration.
- Improved: SMTP test email button is now active only when all required fields (host, username, password) are filled and the enable toggle is on.
- Improved: Password field placeholder defaults to « Password »; changes to « App Password » when Gmail is selected from the SMTP server preset.
1.0.3
- Added:
Domain Pathheader to support plugin translations. - Added:
load_plugin_textdomain()to load translation files from the languages folder.
1.0.2
- Fixed: Stable tag corrected in readme.txt.
1.0.1
- Improved: Plugin promotion section now displays actual plugin icons when available, with Dashicons as fallback.
1.0.0
- Initial release.