Hamdi Saidani

Fortress Login Pro is a battle-ready security plugin that replaces your WordPress login page (<code>wp-login.php</code>) with a private, rotating URL that only you control.
🛡️ It doesn’t just hide the login—it lets you track, rotate, and control it.
Perfect for freelancers, agencies, eCommerce owners, and anyone tired of blind brute-force attacks.
<h3>🔐 Key Features</h3>
<ul>
<li>Custom Login URL: Hide <code>wp-login.php</code> and set your own private login path </li>
<li>Auto-Rotate Slugs: Automatically change your login URL on a custom schedule </li>
<li>Dual-Slug Rotation Safety: Keep the old URL live until the new one is used (fail-safe) </li>
<li>Slug Generator: Choose readable word combos or full-random slugs (with number support) </li>
<li>Access Logs & Charts: See IPs, timestamps, referrers, and user-agents by login attempt </li>
<li>Export Logs: Download access history or slug changes in CSV or JSON </li>
<li>Slug History Panel: Restore, archive, or delete old slugs anytime </li>
<li>SMTP Configuration: Set up outgoing email for login slug alerts and rotation notices </li>
<li>Test Email & Rotation: Built-in checks before activating rotation so you don’t get locked out </li>
<li>System File Protection: Optional toggle to block access to <code>install.php</code> and <code>setup-config.php</code> via <code>.htaccess</code> </li>
<li>Clean UI: Fast, modern dashboard with zero bloat or upsell traps </li>
</ul>
<h3>✅ Works With</h3>
<ul>
<li>WooCommerce, Easy Digital Downloads, and major eCommerce plugins </li>
<li>Membership systems like MemberPress, Paid Memberships Pro </li>
<li>Popular security plugins: Wordfence, iThemes, Sucuri </li>
<li>Caching tools like WP Rocket, Cloudflare, W3 Total Cache </li>
</ul>
<h3>🚀 Why Fortress (vs limit login or captcha plugins)?</h3>
Most plugins try to respond to brute-force. 
Fortress prevents it by removing the login form from public view.
No login page = no attack surface.
<h3>Final Word</h3>
Fortress Login Pro doesn’t just hide your login—it makes you smarter about who’s trying to reach it.
Real logs. Real control. No BS. 
Ready to lock down WordPress the way it should’ve shipped.
Try our companion plugin: <a href="https://wordpress.org/plugins/notification-blocker/" rel="ugc">Notification Blocker</a> — hide noisy dashboard alerts with one click.

Fortress Login Pro – Secure, Hide & Rename Login URL

Hide and rotate your WordPress login URL. Track access, export logs, and prevent brute-force attacks with real-time visibility.

Jeff Sterup

This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist and the SANS Internet Storm Center API as well. 
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.

Honeypot Toolkit


This plugin does the job very well. Besides using Project Honyepot and Spamcop, I really love the additional Login and 404 handling that protects from brute force attacks. In combination with a 2FA login plugin this makes me finally feel a lot safer using Wordpress. Thanks a lot!


Amazing! A must have for every site!

Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.

Fortress Login Pro – Secure, Hide & Rename Login URL vs Honeypot Toolkit