Plugin Pulse Beta
← Pulse

Protect WP Admin

by WP-EXPERTS.IN · Admin & Utilities

Also makes 20 other plugins · 25.8K+ installs across the portfolio →

Protect your WP site by changing the default wp-admin URL and customizing the login page for enhanced security.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

B 74/100

no flags

Active installs

10K+

≈15K estimated

Momentum

+16%

downloads vs prior 30d

Biggest opportunity: Swap “secure login”, “admin url” and “secure admin” for “protect wordpress admin”, “wp admin url” and “protect”. “secure login” isn't earning its slot: you're not in the first 24 results for its own search. “protect wordpress admin” sits at #10 untagged, close enough for a declared tag to move it up. “admin url” isn't earning its slot: it only gets you to #22. “wp admin url” sits at #19 untagged, close enough for a declared tag to move it up. “secure admin” isn't earning its slot: it only gets you to #12. “protect” sits at #21 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

How scoring works →
74 Health · B
Maintenance 75/100
Rating quality 65/100
Support 70/100
Security 92/100

74 health vs 56 average across 5,898 Admin & Utilities plugins

Install conversion

How it's measured →

1.8%

of downloads still active

At least 10K of 542.1K lifetime downloads are still running, above its category: the median Admin & Utilities plugin keeps 0.6%, across 4,191 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Admin & Utilities plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 1 release in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Details

Version
4.2
Last updated
9mo ago
Added
2014-10-20 · 12 yrs old
Requires WP
6.0
Tested up to
6.9.11
Requires PHP
—

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

90 / 100

Excellent listing optimization

Well tuned across the board

Update recency 84/100

Updated 269 days ago, past the ~180 days where wp.org starts discounting

WP compatibility 100/100

Tested up to WordPress 6.9.11, the current branch or newer

Rating quality 77/100

3.6★ over 50 reviews, smoothed to 3.85★

Listing tuning 100/100

5 of 5 tags set · short description in place

Daily downloads

Since 5 Oct 2022 · 1,489 days · wp.org + Plugin Pulse archive

+16% vs prior 30d
341 Nov 2026

30-day downloads

Rolling 30-day volume · peak 9.1K · peaks are release surges

1.2K1 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Protect WP Admin · #1722youLogin Me Now · #8495Teydea Password Rese · #8920Custom WP-Admin URL · #13412

Rating trend

Star average over time · dips mark rough releases

3.61 Nov 2026

Health trend

Composite health score, snapshotted daily

741 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1211 Nov 2026

Release cadence

Occasionally updated
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

1

releases in the last 12 months

9mo ago

latest release · v4.2 · 5 Feb 2026

3

tagged releases on record

Recent releases

4.2 · 5 Feb 20264.1 · 9 Jul 20254.0 · 27 Sep 2023

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 45% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v4.2 45%
v4.0 16%
v4.1 9%
v3.8 7.2%
v3.0 6.5%
Older / other versions 16%

Estimated active installs

The public count shows “10K+”. Our estimate pins where the real number sits.

tracked estimate
10K–20K ≈15K

Crossed into this band 18 months ago; the previous band took 2.6 years to cross, which places it about 50% of the way through.

Install history since 22 Nov 2019

10K1 Nov 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ truekandyan
    5.3y ago

    Thank you for giving us Simple and Amazing plugin. Please check Login form customizing is not working. Hide wp-admin is working good. Thanks again.

    Read on wp.org ↗
  2. ★★★★★ samuel
    5.5y ago

    A loophole has been found by hackers. My websites have been attacked by login brute-force thousands times everyday. Hackers could access wp-login.php directly when Protect-wp-admin was enabled. I try disabling the file access to wp-login.php in .htaccess but it also disable accessing the login page via the URL defined in Protect-wp-admin. Finally, it makes this plugin useless.

    Read on wp.org ↗
  3. ★★★★★ elasticio
    5.7y ago

    After updating the WordPress version to 5.6, none of my team could log in any longer. Both URLs, the one created through the plugin and the original wp-admin link, kept redirecting to the Homepage. I had to deactivated all the plugins via MyPHPAdmin to get back the control of our website. This plugin was the first I reactivated and I could immediately replicate the issue. This is imho not acceptable.

    Read on wp.org ↗
  4. ★★★★★ ichmirmich
    5.8y ago

    The plugin works as expected and after a recent WP update, it didn’t work anymore. contacted the support and they helped me out super quick.

    Read on wp.org ↗
  5. ★★★★★ bsp7744
    5.8y ago

    Junk, do not use. Updated to WordPress 5.6 and I am now locked out of ALL my websites. Avoid at all costs.

    Read on wp.org ↗
  6. ★★★★★ pivonka1975
    5.9y ago

    Cannot log in today after WordPress 5.6 renewal, have to disable this plugin via FTP. Bad experience!

    Read on wp.org ↗
  7. ★★★★★ Anonymous User 17979783
    6.5y ago

    I strongly recommend this Plug-in, they have fantastic service and this crew has a very professional approach as they will return your help call within minutes helping you trouble shoot your problems about my. This Plug in is so beneficial Im glad I have installed it on my website from the very beginning at the early stages of my site! This topic was modified 6 years, 2 months ago by Anonymous User 17979783. This topic was modified 6 years, 2 months ago by Anonymous User 17979783.

    Read on wp.org ↗
  8. ★★★★★ Hanun Khan
    7.4y ago

    Cannot LOGIN on re write login page, How to Reset this, i folow your documentaion change file .htacces but still cannot login

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 4.0 Fixed major bug Tested with WordPress 6.6.2 4.0
  2. — Version 3.8 Security updates Tested with WordPress 5.9.3 3.8
  3. — Version 3.7 Fixed URL issue Code optimization 3.7
  4. — Version 3.6 Optimized code and security Tested with WordPress 5.8.2 3.6
  5. — Version 3.5 Resolved double slash issue in login URL 3.5
  6. — Version 3.4 Added admin bar restriction for non-admin users 3.4

Security history

via Wordfence Intelligence

All 4 disclosed vulnerabilities are patched in the current version (4.2). Sites still on an older version should update.

  1. 2025-12-15 CVE-2025-64249 Missing Authorization Affects <= 4.1 Patched in 4.2
  2. 2023-06-12 CVE-2023-3139 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.8 Patched in 4.0
  3. 2022-08-05 Improper Neutralization of Input During Web Page Generation Affects <= 3.7 Patched in 3.8
  4. 2021-12-23 CVE-2021-24906 Incorrect Authorization Affects <= 3.6 Patched in 3.7

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 1 language, 0 at 90% or more

Swedish 58%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

5 of 8 pass · checked 28 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Protect your WP site by changing the default wp-admin URL and customizing the login page for enhanced secur..."
  • ✓ Has a FAQ 5 questions in the FAQ.
  • ✓ FAQ asks real questions 5 of 5 read like questions a user would type.
  • ! Names who it is for One audience phrase ("ideal for"); say who the plugin is for and what they use it for.
  • ! Names what it works with Names no plugin, service or platform it works with.
  • ✓ Headings and lists 3 headings and 3 lists.
  • ✓ Enough to quote 1,056 characters of description.
  • ! Tags match the text Only 1 of 5 tags appear in the text ("hack prevention", "protect admin", "secure admin", "secure login" missing).

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2025-05-03 20K+ → 10K+ down after 942 days in tier
  2. 2022-10-04 30K+ → 20K+ down after 1094 days in tier
  3. 2019-10-06 40K+ → 30K+ down after 149 days in tier
  4. 2019-05-10 30K+ → 40K+ up after 506 days in tier
  5. 2017-12-20 20K+ → 30K+ up after 331 days in tier
  6. 2017-01-23 10K+ → 20K+ up after 284 days in tier
  7. 2016-04-14 7K+ → 10K+ up after 135 days in tier
  8. 2015-12-01 6K+ → 7K+ up after 25 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Protect WP Admin into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/protect-wp-admin" width="480" height="300" style="border:0" loading="lazy" title="Protect WP Admin — Plugin Pulse"></iframe>
Preview card ↗

Protect WP Admin: 10K+ active installs, 3.6★ (50 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/protect-wp-admin

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.