{"id":65,"date":"2017-07-02T06:24:03","date_gmt":"2017-07-02T06:24:03","guid":{"rendered":"http:\/\/hyderabadwebhosting.in\/blog\/?p=65"},"modified":"2024-11-26T10:13:16","modified_gmt":"2024-11-26T10:13:16","slug":"secure-wordpress-admin-url","status":"publish","type":"post","link":"https:\/\/hyderabadwebhosting.in\/blog\/secure-wordpress-admin-url\/","title":{"rendered":"Three Different ways to secure WordPress admin URL"},"content":{"rendered":"

Three Different ways to secure WordPress admin URL \u00a0<\/strong><\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Wordpress is the most popular open source website creation tool.WordPress is easy to install and design your website through WordPress dashboard.Most common wordpress dashboard URL is http:\/\/yourdomain.com\/wp-admin or http:\/\/yourdomain.com\/wp-login.php(Replace yourdomain.com by your domain name).So It leads to frequent hacking attempts Occuring in your wordpress admin URL i.e Brute force and Distibuted Denial of service(DDoS).Here we are going to discussed about how to secure your wordpress admin URL with different methods.<\/span><\/p>\n

To secure wordpress admin Page by first level authentication<\/span><\/strong><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Here,we are discussed about to enable first level authentication of your WordPress admin URL.<\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 You need to take the backup of .htaccess file before making any changes for your safety purpose.if you can’t see the .htaccess file,then make sure you selected”Show Hidden Files” option in your cPanel file manager settings Else you can create .htaccess file<\/span><\/p>\n

Step-1 :<\/span><\/strong> Login to your cPanel >> File Manager >> Go to the WordPress admin folder<\/span><\/p>\n

\"\"<\/p>\n

Step-2 :<\/span><\/strong> Edit the .htaccess file with below line <\/span><\/p>\n

ErrorDocument 401 \u201cUnauthorized Access\u201d
\nErrorDocument 403 \u201cForbidden\u201d
\n<FilesMatch \u201cwp-login.php\u201d>
\nAuthName \u201cContact Your Hosting Company for Username and Password\u201d
\nAuthType Basic
\nAuthUserFile \/home\/username\/.wpadmin
\nrequire valid-user
\n<\/FilesMatch> <\/span><\/p>\n

*Replace username as your cPanel username<\/span><\/p>\n

\"\"<\/p>\n

Step-3 :<\/span><\/strong> Create .wpadmin folder under home directory and enter your username and password follow the below format <\/span><\/p>\n

Username:Password<\/span><\/p>\n

eg. word:$apr1$OViT3DTL$61iodJ.L4XSSXo\/INfUMg0<\/span><\/p>\n

Here \u201cword\u201d is the username and followed by : is the encrypted(MD5) password<\/span><\/p>\n

Note : password has been encrypted with the help of available online MD5 encrypted tool.<\/span><\/p>\n

*You can use the username and password as per your convenience<\/span><\/p>\n

\"\"<\/p>\n

Step-4 :\u00a0<\/span><\/strong>Now access the WordPress admin URL,you will show-up the pop-up page.Now you can use the username and password as you updated in .wpadmin file.<\/span><\/p>\n

Once you entered the username and password in pop-up page,you will be re-directed to the WordPress admin page<\/span><\/p>\n

\"\"<\/p>\n

To enable Two-Factor Authenticator of the WordPress admin URL using Plugin \u2013 Google authenticator \u2013 Two Factor authentication<\/strong><\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Most common and frequent hacking attempts occurs on WordPress admin URL.So One of the best way to secure your WordPress admin URL is Two-Factor Authenticator.Two-Factor authenticator is highly secure and easy to install.Sometimes,your WordPress admin page username and passowrd may be guessed But Two-Factor Authenticator adds a second layer of security to your WordPress websites.This plugin provides two-factor authentication during login and it protects from hacking attempts.<\/span><\/p>\n

Follow the below steps to install and Activate Plugin <\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Login to your WordPress Dashboard >> Click Plugins >> Search your plugin name in search option >> Install now >> Once you plugin has been install,Click Active button to activate your plugin<\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Once you Plugin has been activated,Click miniOrange 2-Factor to create your account.<\/span><\/p>\n

Create an account use necessary details and click submit.<\/span><\/p>\n

\"\"<\/p>\n

Once you click submit, OTP has been sent to the mentioned mail ID while creating an account.Enter the OTP in “Enter OTP” and click Validate OTP to validate your email ID.<\/span><\/p>\n

\"\"<\/p>\n

Kindly use any of the authentication method as shown in screen-shot to enable Two-Factor authenticator<\/span><\/p>\n

\"\"<\/p>\n

After logged in with your WordPress admin,you will show the Two-Factor authentication page for email verification as like in screen-shot below<\/span><\/p>\n

\"\"<\/p>\n

Also verification mail sent to your mentioned mail ID.Mail as look like as below screen-shot.<\/span><\/p>\n

\"\"<\/p>\n

If you accept the verification mail,it will redirect to your WordPress Dashboard.<\/span><\/p>\n

If you deny the verification mail,you will not able to login your WordPress Dashboard.<\/span><\/p>\n

To change the WordPress admin URL using plugin \u2013 WPS Hide Login<\/strong><\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 WPS Hide login is easily and safely changing the WordPress admin URL to anything youn want to change. It doesn\u2019t literally rename or change files in core,nor does it add rewrite rules.Wp-admin and wp-login.php directory page become inaccessible,Sdo you should remember your admin URL.Once you deactivate this plugin bring your site back exactly to the state it was before.<\/span><\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Login to your WordPress Dashboard >> Click Plugins >> Search your plugin name in search option >> Install now >> Once you plugin has been install,Click Active button to activate your plugin<\/span><\/p>\n

Once you activated the Plugin,click Plugin >> WPS Hide Login >> Settings<\/span><\/p>\n

\"\"<\/p>\n

Under WPS Hide Login,you can change the WorPress admin URL as your wish and then click Save changes.<\/span><\/p>\n

\"\"<\/p>\n

Now you can able to access the WordPress admin Login with the updated URL.<\/span><\/p>\n

\t
\t\t \t\t\"www.pdf24.org\"<\/a> \t\t  <\/span> \t\tSend article as PDF<\/span> \t\t  <\/span> \t\t \t\t \t<\/form> <\/div>","protected":false},"excerpt":{"rendered":"

Three Different ways to secure WordPress admin URL \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Wordpress is the most popular open source website creation tool.WordPress is easy to install and design your website through WordPress dashboard.Most common wordpress dashboard URL is http:\/\/yourdomain.com\/wp-admin or http:\/\/yourdomain.com\/wp-login.php(Replace yourdomain.com by your domain name).So It leads to\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":159,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","footnotes":""},"categories":[3],"tags":[],"class_list":["post-65","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress"],"_links":{"self":[{"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/posts\/65","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/comments?post=65"}],"version-history":[{"count":14,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/posts\/65\/revisions"}],"predecessor-version":[{"id":1267,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/posts\/65\/revisions\/1267"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/media\/159"}],"wp:attachment":[{"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/media?parent=65"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/categories?post=65"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hyderabadwebhosting.in\/blog\/wp-json\/wp\/v2\/tags?post=65"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}