Peter

Adds shortcodes [blogurl], [posturl], [templateurl], and [childtemplateurl] for WordPress 2.6 and up. Use [blogurl] to generate your site URL. It offers the parameters “slash” and “noslash” (to add a trailing slash; [templateurl] and [childtemplateurl] also support this), as well as “uploads” to produce the URL of the uploads folder and “wordpress” to produce the URL of your WP files. Use [posturl id=3] (replace “3” with a post ID) to generate the permalink for any post.
<h4>Features</h4>
<ul>
<li>
[blogurl] will generate <code>http://www.yoursite.com/</code>
</li>
<li>
[blogurl wordpress] will generate the URL to the root of your WordPress files, if they are in a different location than your site root
</li>
<li>
[blogurl noslash] will generate <code>http://www.yoursite.com</code>
</li>
<li>
[blogurl uploads] will generate <code>http://www.yoursite.com/wp-content/uploads/</code>
</li>
<li>
[blogurl uploads noslash] will generate <code>http://www.yoursite.com/wp-content/uploads</code>
</li>
<li>
[posturl id=375] will generate the correct permalink for the post with an ID of 375; for example, <a href=”[posturl id=375]”>post about this plugin</a> would generate <a href="http://www.theblog.ca/blog-url-shortcodes" title="From Peter's Useful Crap" rel="nofollow ugc">post about this plugin</a>
</li>
<li>
[templateurl] will generate the URL to your parent theme’s root
</li>
<li>
[childtemplateurl] will generate the URL to your child theme’s root
</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 2.6 or higher</li>
</ul>

Peter’s Blog URL Shortcodes

Use shortcodes for blog URLs, post URLs, and template URLs so that your posts always have the correct internal links.

Julio Potier

Grégory Viguier

SecuPress

This plugin forbids access to https://example.com/wp-login.php and creates new urls, like https://example.com/login or https://example.com/logout. 
This is a great way to limit bots trying to brute-force your login (trying to guess your login and password). Of course, the new URLs are easier to remember too.
Also remember: the use of this plugin does NOT exempt you to use a strong password. Moreover, never use “admin” as login, this is the first attempt for bots.
By the way, if you are looking for a complete security solution, take a look at <a href="https://wordpress.org/plugins/secupress/" rel="ugc">SecuPress</a>: Move Login is included inside.
<h4>Multisite</h4>
Yes! The plugin must be activated from your network. 
Note 1: this plugin deals only with <code>wp-login.php</code>, not with <code>wp-signup.php</code> nor with <code>wp-activate.php</code> (yet). That means https://example.com/register will still redirect to https://example.com/wp-signup.php. I think this will be the next step though, but no ETA. 
Note 2: if users/sites registrations are open, you shouldn’t use this plugin yet. There are some places where the log in address is hard coded and not filterable. A <a href="https://core.trac.wordpress.org/ticket/31495" title="Always use 'login' as $scheme parameter for "login-ish" URLs, and other inconsistencies" rel="nofollow ugc">bug ticket</a> is open.
<h4>Requirements</h4>
<ul>
<li>You will need a FTP access: if the <code>.htaccess</code>/<code>web.config</code> file is not writable (you will need to add the given rules manually), or if something is wrong and you can’t log in anymore (see the FAQ in that case).</li>
<li>Should work on IIS7+ servers but not tested (I guess you should probably save a copy of your <code>web.config</code> file before the plugin activation).</li>
<li>For Nginx servers, the rewrite rules are not written automatically of course, but they are provided as information in the plugin settings page.</li>
</ul>

Move Login

Don't know why I didn't find "Move Login" first. I already tested 2 alternative free plugins and it was deficient in different ways.  "Move Login" is powerful, light and easy to set up. Very nice find. Thanks.

The best of the 3 ones I tested

Change your login URL for something like https://example.com/login and stop login brute-force attempts.

Peter’s Blog URL Shortcodes vs Move Login