How to Change the WordPress Login URL to Improve Website Security
The default WordPress login URL at /wp-login.php is one of the most targeted entry points for automated brute-force attacks. Changing it to a custom address removes the predictable target and takes about two minutes to set up using the free WPS Hide Login plugin.