Can I Change WP-Admin to Something Else in WordPress?
This tutorial has moved to the new WP Ghost Knowledge Base where each feature is presented in detail.
Yes. In WP Ghost > Change Paths > Admin Security, enter a new name in Custom Admin Path and click Save. The wp-admin folder stays where it is: WP Ghost serves the dashboard at the new URL, and with Hide “wp-admin” on, bots that ask for /wp-admin get a 404.
Why changing wp-admin matters
The /wp-admin directory is the single most recognizable WordPress path. Every WordPress installation uses it, and every bot scanning for WordPress targets it. Bots probe /wp-admin to confirm a site runs WordPress, to access the login redirect (since visiting /wp-admin when logged out redirects to the login page), and to attempt direct access to admin files and AJAX endpoints. Changing this path breaks the first step in the automated attack chain.
How to change wp-admin
Go to WP Ghost > Change Paths > Admin Security. Enter your custom admin path in the Custom Admin Path field. Choose something unique and not guessable. Avoid common alternatives like /admin, /dashboard, or /backend as bots check these too. A random string or a site-specific term works best.
After saving, log out, log back in through your custom login path and bookmark the new admin URL. Switch on Hide “wp-admin” in the same section too, so the default /wp-admin returns a 404 for anyone who isn’t logged in; that’s the setup we recommend.
Clear all cache after making the change. Test the new admin URL in a private browser window by logging in through your custom login path first, then navigating to the custom admin URL. For the full admin path configuration guide, see the Change wp-admin Path tutorial.
Important: Change the login path too
Changing wp-admin alone is only half the job. When a non-logged-in visitor accesses /wp-admin, WordPress redirects them to /wp-login.php. If you change the admin path but leave the login path at default, the redirect still exposes the login page. For complete protection, change both: the admin path in Admin Security and the login path in Login Security. WP Ghost handles both independently, and Ghost Mode changes them together automatically.
Frequently asked questions
Will changing wp-admin break my plugins?
In most cases, no. WP Ghost uses virtual rewrite rules, so your actual files and folders stay exactly where they are. Plugins that rely on admin-ajax.php or the REST API continue working because those are separate endpoints. On some managed hosting environments (like WP Engine or Nginx-only servers), custom admin paths may need additional server configuration. If you experience issues, revert the admin path to default in WP Ghost while keeping all other security features active. On WP Ghost Premium 9.0.13 or later, press Start Diagnosis in Ghost Doctor on the Level of Security page. It finds which path your server stopped serving and repairs it.
What if I forget my custom admin URL?
Use the Safe URL parameter to bypass all WP Ghost path changes for a single request. This lets you access the default /wp-admin temporarily. You can also disable WP Ghost via FTP or add define('HMWP_DISABLE', true); to wp-config.php. See the Emergency Disable tutorial for full recovery options.
Is this a free feature?
Yes. Changing and hiding the wp-admin path is included in the free version of WP Ghost.
Does WP Ghost modify WordPress core files?
No. The wp-admin directory is not renamed, moved, or modified. WP Ghost uses server rewrite rules to create a virtual path that maps to the original directory. Deactivating WP Ghost restores the default /wp-admin path instantly.