I would like to rename my wp-admin folder due to some security concerns. Is it really possible?

The less it looks/is built like default WP, the harder it is to attack known vulnerabilities. Being able to rename those directories can help stop an exploit dead in its tracks.

Otto mentioned in this thread its possible using "admin_url" filter. Is it really possible? If yes can someone give me some sample code. I hope this is a useful question


For a fully-working solution, you will need to modify certain hard-coded urls in core files, which is not fun to have to do each time WP is upgraded.

One easier option is to protect the wp-admin folder with an .htaccess file. You could basically deny all IP addresses and whitelist the few IP's that you or your editors might use. You could also use HTTP AUTH to add another layer of password protection. It will prevent unauthenticated users from viewing the wp-login page.

And regarding renaming your folder, I'm not sure that it will really make your site more secure. For example, if you use any AJAX plugins, a hacker will know your admin folder location right away! And there are other simple ways to determine it as well...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.