[ad_1]
Recently my website is getting brutal force attacks and been using wordfence to scan and manually delete or fix the infected files.
Also I can ser many suspicious login request from unknown ip or location.
So i was thinking to change the admin dashboard url. But how safe is it?
Example
Instead of …../wp-admin
I was thinking yo change it to
…/randomname….
I found a plugin name wps hide login for it.
[ad_2]
If you are so worried about your site go ahead but it doesnt make any difference.
Harden your site properly instead
No.
Protect your site properly. There hundreds or articles on how to do that. There are also hundreds of articles on why changing your admin URL is pointless, ‘security by obscurity’.
May I recommend something similar but different?
You might want to change the login URL — wp-login.php — instead of changing the /wp-admin/ portion of the dashboard URL, to minimize potential problems caused by poorly-written themes and plugins.
Changing the URL will immediately reduce the number of scripted brute force attacks that use up site resources.
You’ll also want to take a few extra steps such as setting up a lockout policy, and Wordfence can definitely help you with this.
To those who say that security through obscurity is not real security, I agree with you.
But imagine that you have 100 stupid robots charging at your front door every hour, ramming it to try to break in.
And let’s say that you simply dig a large moat in front of your house, and you move your door to the side of the house.
Anyone with half a mind with find the side door within seconds, including bad actors. But all of those idiot robots (script kiddies) will fall into your most (a 404 error page).
That’s basically what you’re doing if you change the login URL — you add a tar pit and move the door to the side.
You’ll still want to lock your doors properly, and install other security measures, but simply moving the front door / login URL can do wonders for blocking the throngs of complete idiots and script kiddies.