Title: Khushal Login Path Guard Author: Khushal Tank Published: December 23, 2025 Last modified: May 28, 2026 --- Search plugins ![](https://ps.w.org/khushal-login-path-guard/assets/banner-772x250.png?rev=3426052) ![](https://ps.w.org/khushal-login-path-guard/assets/icon-256x256.png?rev=3425930) # Khushal Login Path Guard By [Khushal Tank](https://profiles.wordpress.org/khushal1995/) [Download](https://downloads.wordpress.org/plugin/khushal-login-path-guard.2.4.1.zip) * [Details](https://en-ca.wordpress.org/plugins/khushal-login-path-guard/#description) * [Reviews](https://en-ca.wordpress.org/plugins/khushal-login-path-guard/#reviews) * [Installation](https://en-ca.wordpress.org/plugins/khushal-login-path-guard/#installation) * [Development](https://en-ca.wordpress.org/plugins/khushal-login-path-guard/#developers) [Support](https://wordpress.org/support/plugin/khushal-login-path-guard/) ## Description Khushal Login Path Guard is a WordPress security plugin that allows you to change your default login URL and protect your site from common attack vectors. The plugin blocks brute-force attempts, prevents user enumeration, secures sensitive files, and hides WordPress information from potential attackers. All blocked paths display 404 errors (Stealth Mode) instead of redirects, making your site invisible to attackers. #### Features **Login Protection:** * Blocks 17+ common brute-force login paths * Custom login URL (only you know the path) * Shows 404 error instead of redirect (no hints to attackers) * Protects /wp-admin, /login, /wp-login.php and more **Advanced Security:** * Blocks XML-RPC (prevents brute-force via API) * Prevents user enumeration via REST API * Blocks author page enumeration (?author=1) * Protects wp-config.php and sensitive files * Blocks direct access to wp-includes PHP files* Removes WordPress version information **Security Headers:** * X-Frame-Options (prevents clickjacking) * X-Content-Type- Options (prevents MIME sniffing) * X-XSS-Protection (XSS attack protection) * Referrer- Policy (privacy protection) * Permissions-Policy (feature restriction) **User-Friendly:** * Easy settings interface * One-click URL copy * Normal functionality for logged-in users * Does not block AJAX requests * Clean admin interface #### Security Benefits 1. **Brute Force Protection** – 15+ login paths blocked 2. **XML-RPC Disabled** – Prevents API-based attacks 3. **User Enumeration Blocked** – Hides usernames from attackers 4. **Sensitive Files Protected** – wp-config.php, .htaccess secured 5. **Security Headers** – Industry-standard HTTP headers 6. **WordPress Hidden** – Removes version and generator tags #### इस्तेमाल करना बेहद आसान है 1. Plugin activate करें 2. Settings > Login Path Security में जाएं 3. अपना custom login path enter करें 4. Settings save करें 5. नया login URL use करें ## Screenshots [⌊Settings page - Configure custom login path⌉⌊Settings page - Configure custom login path⌉[ Settings page – Configure custom login path [⌊New login URL display - Your secure login URL⌉⌊New login URL display - Your secure login URL⌉[ New login URL display – Your secure login URL [⌊Security features overview⌉⌊Security features overview⌉[ Security features overview ## Installation 1. Upload the plugin folder to `/wp-content/plugins/` directory 2. Activate the plugin through the ‘Plugins’ menu in WordPress admin 3. Go to Settings > Login Path Security to configure OR 1. Go to Plugins > Add New in WordPress admin 2. Search for “Khushal Login Path Guard” 3. Install and Activate ## FAQ ### What if I forget my login URL? You can rename or delete the `/wp-content/plugins/khushal-login-path-guard/` folder via FTP or cPanel. This will deactivate the plugin and you can login using the normal wp-login.php. ### Will this plugin slow down my site? No, this plugin is very lightweight and will not affect your site’s performance. ### Will wp-admin work for logged-in users? Yes, everything will work normally for users who are already logged in. ### Does this work with multisite? Yes, this plugin is multisite compatible. ### Will AJAX requests be blocked? No, WordPress AJAX requests will work normally. ## Reviews ![](https://secure.gravatar.com/avatar/fd84f0396fa44936185161d68c08e92af7bc92ee39d5bef2665543add19ddf93? s=60&d=retro&r=g) ### 󠀁[Best wp login security plugin](https://wordpress.org/support/topic/best-wp-login-security-plugin/)󠁿 [umang3640](https://profiles.wordpress.org/umang3640/) December 24, 2025 one of the best security plugin in wp also free plugin so this is very helpful me this plugin. [ Read all 1 review ](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/) ## Contributors & Developers “Khushal Login Path Guard” is open source software. The following people have contributed to this plugin. Contributors * [ Khushal Tank ](https://profiles.wordpress.org/khushal1995/) [Translate “Khushal Login Path Guard” into your language.](https://translate.wordpress.org/projects/wp-plugins/khushal-login-path-guard) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/khushal-login-path-guard/), check out the [SVN repository](https://plugins.svn.wordpress.org/khushal-login-path-guard/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/khushal-login-path-guard/) by [RSS](https://plugins.trac.wordpress.org/log/khushal-login-path-guard/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.4.1 * Fixed wp-admin redirect issue – now shows 404 when logged out * Added multiple layers of protection for wp-admin access * Improved logout functionality * Enhanced user experience #### 2.4.0 * Changed wp-admin behavior – shows 404 instead of redirect when logged out * Improved security by preventing information leakage * Better stealth mode implementation #### 2.3.3 * Fixed dashboard access after login * Removed wp-admin from directory blocking * Improved logged-in user detection #### 2.3.2 * Fixed wp-admin access timing issue * Changed hook from ‘init’ to ‘wp’ for better authentication detection * Improved compatibility #### 2.3.1 * Fixed logout functionality * Added proper logout URL filtering * Improved redirect handling #### 2.3.0 * Added logout redirect to custom login page * Enhanced logout URL handling * Improved user experience #### 2.2.5 * Fixed wp-admin directory access * Removed wp-admin from blocked directories list * Improved functionality for logged-in users #### 2.2.4 * Fixed login.php blocking * Added admin-login.php and adminlogin.php to blocklist * Updated blocked paths count #### 2.2.3 * Fixed undefined variable warnings * Initialized all required wp-login.php variables * Improved login page compatibility #### 2.2.2 * Added comprehensive login path blocking * Added /login, /signin, /administrator paths to blocklist * Updated admin interface #### 2.2.1 * Changed redirect behavior to show 404 error * Removed redirect URL setting * Enhanced security by hiding WordPress #### 2.2.0 * Added XML-RPC blocking * Added REST API user enumeration protection * Added author page enumeration blocking * Added sensitive file protection * Added wp-includes PHP file protection * Added comprehensive security headers * Expanded blocked login paths #### 2.0.0 * Major security update * Added multiple security features * Enhanced protection mechanisms #### 1.0.0 * Initial release * Custom login path functionality * wp-login.php and wp-admin protection * Admin settings interface * Basic security features ## Meta * Version **2.4.1** * Last updated: **5 months ago** * Active installations: **Fewer than 10** * WordPress Version: ** 5.0 or higher ** * Tested up to: **7.0.7** * PHP Version: ** 7.0 or higher ** * Language * [English (US)](https://wordpress.org/plugins/khushal-login-path-guard/) * Tags: * [Brute Force](https://en-ca.wordpress.org/plugins/tags/brute-force/)[login](https://en-ca.wordpress.org/plugins/tags/login/) [security](https://en-ca.wordpress.org/plugins/tags/security/)[user enumeration](https://en-ca.wordpress.org/plugins/tags/user-enumeration/) [xmlrpc](https://en-ca.wordpress.org/plugins/tags/xmlrpc/) * [Advanced View](https://en-ca.wordpress.org/plugins/khushal-login-path-guard/advanced/) ## Ratings 5 out of 5 stars. * [ 1 5-star review ](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/khushal-login-path-guard/reviews/) ## Contributors * [ Khushal Tank ](https://profiles.wordpress.org/khushal1995/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/khushal-login-path-guard/)