v1.0.0 - Initial Release

🎉 Hide Login Secure v1.0.0

First stable release of Hide Login Secure - a lightweight WordPress login protection plugin.

✨ Features

• Hidden Entry URL: Completely hide wp-login.php and wp-admin from public view
• Signed Access Tokens: HMAC-SHA256 signed, short-lived cookies for secure login access
• Smart Interception: Blocks sensitive paths, XML-RPC, and REST API user enumeration
• IP Controls: Manual Whitelist/Blacklist with IPv4/IPv6 and CIDR support
• Cloudflare Aware: Securely detects real visitor IPs behind Cloudflare proxies
• Passkey & 2FA Friendly: Fully compatible with WordPress 6.3+ Passkeys
• Zero Bloat: No heavy JavaScript, pure optimized PHP

🔒 Security

• Blocks brute-force attacks before they start
• Returns 403 Forbidden to malicious scanners (honeypot)
• Prevents author enumeration and username discovery
• Unifies login error messages to prevent user enumeration

Installation

1. Download hide-login-secure.zip
2. Upload via WordPress Dashboard → Plugins → Add New → Upload Plugin
3. Activate and configure your secret URL at Settings → Hide Login

📄 License

GPL-2.0

---

Author: Jacker Architect
Website: https://jackerteo.com/plugin
Support: support@jackerteo.com