Search the plugin repository for WPS Hide Login. With over 400,000 active installs and a 5 star rating, this is head and shoulders above any similar solutions. Go ahead and download and activate it. Once that's done, you will find its settings under the settings tab in the left hand admin sidebar.
As you can see there are only two options. One allows you to change the login URL - which applies to /wp-admin too. The other is a redirection URL which is pushed to anyone trying to access wp-login or wp-admin. You can leave this on the regular 404 page if you wish.
It is advisable to change the login URL to something that isn't too obvious to guess. Whatever you do though, DO NOT FORGET what it is, or you will not be able to access the back-end any more.
For the purposes of this tutorial, I have called mine testloginpage. Once you click on Save Changes you are all set. Log out of Wordpress and try to load up either the /wp-admin or /wp-login pages. You will be redirected to your 404 page not found page.
So in my case, I enter muxxy.local/testloginpage into the address page and I'm greeted with the regular Wordpress login page.
That's it! Your Wordpress site is now that little bit more protected than most.
