Julio Potier

Grégory Viguier

SecuPress

This plugin forbids access to https://example.com/wp-login.php and creates new urls, like https://example.com/login or https://example.com/logout. 
This is a great way to limit bots trying to brute-force your login (trying to guess your login and password). Of course, the new URLs are easier to remember too.
Also remember: the use of this plugin does NOT exempt you to use a strong password. Moreover, never use “admin” as login, this is the first attempt for bots.
By the way, if you are looking for a complete security solution, take a look at <a href="https://wordpress.org/plugins/secupress/" rel="ugc">SecuPress</a>: Move Login is included inside.
<h4>Multisite</h4>
Yes! The plugin must be activated from your network. 
Note 1: this plugin deals only with <code>wp-login.php</code>, not with <code>wp-signup.php</code> nor with <code>wp-activate.php</code> (yet). That means https://example.com/register will still redirect to https://example.com/wp-signup.php. I think this will be the next step though, but no ETA. 
Note 2: if users/sites registrations are open, you shouldn’t use this plugin yet. There are some places where the log in address is hard coded and not filterable. A <a href="https://core.trac.wordpress.org/ticket/31495" title="Always use 'login' as $scheme parameter for "login-ish" URLs, and other inconsistencies" rel="nofollow ugc">bug ticket</a> is open.
<h4>Requirements</h4>
<ul>
<li>You will need a FTP access: if the <code>.htaccess</code>/<code>web.config</code> file is not writable (you will need to add the given rules manually), or if something is wrong and you can’t log in anymore (see the FAQ in that case).</li>
<li>Should work on IIS7+ servers but not tested (I guess you should probably save a copy of your <code>web.config</code> file before the plugin activation).</li>
<li>For Nginx servers, the rewrite rules are not written automatically of course, but they are provided as information in the plugin settings page.</li>
</ul>

Move Login

Don't know why I didn't find "Move Login" first. I already tested 2 alternative free plugins and it was deficient in different ways.  "Move Login" is powerful, light and easy to set up. Very nice find. Thanks.

The best of the 3 ones I tested

Change your login URL for something like https://example.com/login and stop login brute-force attempts.

cartpauj

With this plugin you can easily add a dynamic login/logout menu item to any menu on your WordPress site. The menu item will change based on whether the current user is logged in or logged out. You can also set a specific login page url, login redirect url and a logout redirect url.
Thanks to Juliobox for his prior efforts on the BAW Login/Logout Menu plugin which this is derived from
<h3>CONFIGURE SETTINGS</h3>
After installing and activating the plugin, you can find the settings in your dashboard under: <code>Settings > Login or Logout</code>
Login Page URL – This should be the URL to the page where your users will login at. For most wordpress sites this will be <code>/wp-login.php</code> but if you’re using a membership plugin like MemberPress, it might be something like <code>/login/</code> instead.
Login Redirect URL – This is the URL you would like your users to be redirected to after they’ve successfully logged in. You can set it to <code>/</code> to take them to the home page after logging in. If you’re using a membership plugin like MemberPress, you might want to use <code>/account/</code> instead. NOTE: Some plugins may override this if they are configured to redirect your users somewhere else during login.
Logout Redirect URL – This is the URL you would like your users to be redirected to after they click the Logout link from this menu item. Use a <code>/</code> to redirect them to the home page, or you might want to redirect them back to the login page at <code>/login/</code> or <code>/wp-login.php</code> etc.
<h3>ADD ITEM TO MENU</h3>
In your dashboard visit <code>Appearance > Menus</code>.
Then at the top right of that page click the <code>Screen Options</code> button and ensure that <code>Login/Logout</code> checkbox is checked.
Then select a menu to edit, or create a new menu if you don’t already have one.
In the left sidebar find <code>Login/Logout</code> and click the checkbox next to <code>Login|Logout</code> and then click <code>Add to Menu</code>.
You can now drag the menu item wherever you’d like it to appear in your menu. The <code>URL</code> in the menu settings must be left at <code>#lolmiloginout#</code> but you can change the <code>Navigation Label</code> if you’d like it to say something else. Just ensure that the <code>|</code> is there in the label separating the two words.
Now save your menu. That’s it!
<h3>Troubleshooting</h3>
After logging in, menu still shows “Login” or Vice-Versa – This is most commonly caused by caching. If you’re using a caching solution such as Cloudflare, WPRocket, or others, be sure that caching is disabled for logged in users, and disable browser caching options as well.
Login is redirecting users somewhere other than my settings – Many times other plugins will have their own login redirect handling which overrides this plugin’s, such as MemberPress for example. In this case, the other plugins will need to be configured to redirect the user where you’d like them to go.

Login or Logout Menu Item

Add a dynamic "Login" or "Logout" menu item to any WordPress Menu and control redirects.

Move Login vs Login or Logout Menu Item