A WordPress Admin URL Masking Plugin with optional IP-based whitelisting to limit access to allowed IPs only.

Dropals Hosting

MaskMyAdmin is a lightweight WordPress plugin designed to enhance your login page security by:
– Replacing the default <code>wp-admin</code> and <code>wp-login.php</code> URLs with a custom login path of your choice 
– Enforcing IP-based access controls for the WordPress dashboard and login screen 
– Preventing unauthorized access or brute-force attempts by obscuring default login endpoints
Designed for site owners and developers who want to hide their admin panel from bots, attackers, or curious users.
Whether you’re running a blog, WooCommerce store, or enterprise WordPress install — MaskMyAdmin gives you a simple, intuitive way to lock down your admin entry points.
Features: 
* Change wp-admin login path to a custom one (e.g., <code>/secure-login</code>) 
* Optional IP-based whitelist — restrict dashboard access to specific IPs only 
* Redirect blocked attempts to a custom page or homepage 
* Progressive brute-force lockout (15 min → 1 hour → 24 hours) 
* Activity log for login attempts and settings changes 
* Email notifications for blocked IPs, failed logins, and settings changes 
* Configurable proxy/CDN header for accurate IP detection (Cloudflare, Nginx, etc.) 
* WP-CLI commands for emergency recovery and management 
* Emergency disable via <code>wp-config.php</code> constant 
* Defense-in-depth .htaccess rules for Apache servers (PHP handles all server types) 
* Lightweight and fast — minimal performance impact 
* Clean uninstall — all data removed when plugin is deleted

Alternatives to Mask My Admin – WordPress Login Security & URL Protection

Top alternatives