Title: GhostLock Hide Login Author: Shubham Patil Published: 12 Oktobra 2026 Last modified: 12 Oktobra 2026 --- Search plugins ![](https://ps.w.org/ghost-hide-login/assets/banner-772x250.png?rev=3740651) ![](https://ps.w.org/ghost-hide-login/assets/icon-128x128.png?rev=3740651) # GhostLock Hide Login By [Shubham Patil](https://profiles.wordpress.org/iamshubhamsp/) [Download](https://downloads.wordpress.org/plugin/ghost-hide-login.1.0.4.zip) * [Details](https://mg.wordpress.org/plugins/ghost-hide-login/#description) * [Reviews](https://mg.wordpress.org/plugins/ghost-hide-login/#reviews) * [Installation](https://mg.wordpress.org/plugins/ghost-hide-login/#installation) * [Development](https://mg.wordpress.org/plugins/ghost-hide-login/#developers) [Support](https://wordpress.org/support/plugin/ghost-hide-login/) ## Description GhostLock Hide Login is a lightweight WordPress security plugin that combines login URL protection and automatic brute-force attack prevention in a single plugin. Unlike many security plugins that require manual configuration, GhostLock Hide Login starts protecting your website immediately after activation. Features: * Hide wp-login.php * Protect wp-admin access * Change the default WordPress login URL * Automatic brute-force attack protection * Automatically block suspicious IP addresses * Detect attacker countries * Security activity logs * Whitelist trusted IP addresses * Redirect attackers to custom 404 pages * Show custom blocked access pages * Lightweight and easy to use * No complex configuration required GhostLock Hide Login helps reduce unauthorized login attempts and improves WordPress website security with minimal setup. ### Privacy GhostLock Hide Login uses the third-party service ipwho.is (ipwhois.io) to detect attacker countries. Data Sent: – Visitor IP address Purpose: – Country detection for security monitoring and attack logging Service URL: https://ipwhois.io/ Terms of Service: https://ipwhois.io/terms ## Installation #### Install from WordPress Admin Dashboard 1. Go to Plugins Add New in your WordPress admin dashboard. 2. Click Upload Plugin. 3. Upload the `ghost-hide-login.zip` file. 4. Click Install Now. 5. Activate the plugin through the Plugins screen. 6. Go to Settings GhostLock Hide Login. 7. Configure your custom login URL and security settings. #### Manual Installation 1. Upload the plugin files to the `/wp-content/plugins/ghost-hide-login` directory. 2. Activate the plugin through the ‘Plugins’ screen in WordPress. 3. Go to Settings GhostLock Hide Login. 4. Configure your plugin settings. ## FAQ ### Will this hide wp-login.php? Yes. Direct access to wp-login.php and wp-admin can be restricted and protected using your custom login URL. ### Does the plugin automatically protect against brute-force attacks? Yes. GhostLock Hide Login automatically limits suspicious login attempts and blocks malicious IP addresses after activation without additional setup. ### Can I unblock IPs manually? Yes. You can manage and remove blocked IP addresses from the plugin settings page. ### Does this plugin use third-party services? Yes. Country detection uses the ipwho.is (ipwhois.io) service over HTTPS. Results are cached for 24 hours per IP address. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “GhostLock Hide Login” is open source software. The following people have contributed to this plugin. Contributors * [ Shubham Patil ](https://profiles.wordpress.org/iamshubhamsp/) * [ Walstar Media LLp ](https://profiles.wordpress.org/walstarmedia/) [Translate “GhostLock Hide Login” into your language.](https://translate.wordpress.org/projects/wp-plugins/ghost-hide-login) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/ghost-hide-login/), check out the [SVN repository](https://plugins.svn.wordpress.org/ghost-hide-login/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/ghost-hide-login/) by [RSS](https://plugins.trac.wordpress.org/log/ghost-hide-login/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.4 * Fix Plugin Check warnings by prefixing local variables in the admin settings page. * Shorten the readme short description to the WordPress 150-character limit. #### 1.0.3 * Stop trusting spoofable forwarding headers for client IP detection. * Use REMOTE_ADDR by default for brute-force and country-cache keys. * Add the `ghost_login_client_ip` filter for trusted reverse-proxy integrations. #### 1.0.1 * Initial release * Hide wp-login.php * Protect wp-admin * Custom login URL support * Automatic brute-force protection * Automatic IP blocking * Country detection * Security logs * IP whitelist * Custom 404 redirect page * Custom blocked page support ## Meta * Version **1.0.4** * Last updated **1 andro ago** * Active installations **Fewer than 10** * WordPress version ** 5.8 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/ghost-hide-login/) * Tags * [brute force protection](https://mg.wordpress.org/plugins/tags/brute-force-protection/) [hide login](https://mg.wordpress.org/plugins/tags/hide-login/)[login protection](https://mg.wordpress.org/plugins/tags/login-protection/) [security](https://mg.wordpress.org/plugins/tags/security/) * [Advanced View](https://mg.wordpress.org/plugins/ghost-hide-login/advanced/) ## Ratings Mbola tsy misy domberina voaray hatreto. [Your review](https://wordpress.org/support/plugin/ghost-hide-login/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/ghost-hide-login/reviews/) ## Contributors * [ Shubham Patil ](https://profiles.wordpress.org/iamshubhamsp/) * [ Walstar Media LLp ](https://profiles.wordpress.org/walstarmedia/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/ghost-hide-login/)