Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

WebProtect.ai

Shikhil

Ananda Krishna

WP Hardening (discontinued)

The WP Hardening is a one-click tool to fix standard security recommendations on your WordPress website.

fullworks

Alan Fuller

Stop User Enumeration

Helps secure your site against hacking attacks through detecting  User Enumeration

mgm security partners GmbH

WP Author Security

Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.

Carlos

No User Enumeration

incredibledeveloperr

Disable User Enumeration

Disable User Enumeration is a plugin designed to prevent hackers scanning your site for user names using REST API call.

thomaskonrad

No Login User Enumeration

This plugin to avoids user enumeration in the Wordpress login form. It does so by simply always returning the same error message, no matter whether on …

mattturow

Double Knot

Stop brute force login attempts by user name.

Paul Gilzow

Super Simple Account Enumeration Blocker

Mark-k

Prevent user name and email leakage

Stops user name enumeration and other type of user name and email leakages.

Khushal Tank

Khushal Login Path Guard is a WordPress security plugin that allows you to change your default login URL and protect your site from common attack vectors. The plugin blocks brute-force attempts, prevents user enumeration, secures sensitive files, and hides WordPress information from potential attackers. All blocked paths display 404 errors (Stealth Mode) instead of redirects, making your site invisible to attackers.
<h4>Features</h4>
Login Protection: 
* Blocks 17+ common brute-force login paths 
* Custom login URL (only you know the path) 
* Shows 404 error instead of redirect (no hints to attackers) 
* Protects /wp-admin, /login, /wp-login.php and more
Advanced Security: 
* Blocks XML-RPC (prevents brute-force via API) 
* Prevents user enumeration via REST API 
* Blocks author page enumeration (?author=1) 
* Protects wp-config.php and sensitive files 
* Blocks direct access to wp-includes PHP files 
* Removes WordPress version information
Security Headers: 
* X-Frame-Options (prevents clickjacking) 
* X-Content-Type-Options (prevents MIME sniffing) 
* X-XSS-Protection (XSS attack protection) 
* Referrer-Policy (privacy protection) 
* Permissions-Policy (feature restriction)
User-Friendly: 
* Easy settings interface 
* One-click URL copy 
* Normal functionality for logged-in users 
* Does not block AJAX requests 
* Clean admin interface
<h4>Security Benefits</h4>
<ol>
<li>Brute Force Protection – 15+ login paths blocked</li>
<li>XML-RPC Disabled – Prevents API-based attacks</li>
<li>User Enumeration Blocked – Hides usernames from attackers</li>
<li>Sensitive Files Protected – wp-config.php, .htaccess secured</li>
<li>Security Headers – Industry-standard HTTP headers</li>
<li>WordPress Hidden – Removes version and generator tags</li>
</ol>
<h4>इस्तेमाल करना बेहद आसान है</h4>
<ol>
<li>Plugin activate करें</li>
<li>Settings > Login Path Security में जाएं</li>
<li>अपना custom login path enter करें</li>
<li>Settings save करें</li>
<li>नया login URL use करें</li>
</ol>

Alternatives to Khushal Login Path Guard

Top alternatives