Block the Wordpress Login Page and how it works?

[yogeshpatel37]

As a matter of security, I would like to block WordPress login page i.e., wp-login.php and wp-admin page from other users’ access.
How can I and what are the consequences in the case when I can’t login?

[crsn]

In your root directory, add the following to your .htaccess file. Replacing “127.0.0.1” with your home IP address

<Files "wp-login.php">
  order deny,allow
  deny from all
  allow from 127.0.0.1
</Files>

In the wp-admin directory, create a new .htacess file and add the following. Again, replacing “127.0.0.1” with your home IP address

order deny,allow
deny from all
allow from 127.0.0.1

[fritex]

@yogeshpatel37

How can I

I’d suggest you to take a look at a post from below which could help you with that while using Cloudflare:

Wordpress protection

I’d suggest you to block any request to the path xmlrpc.php via Firewall Rule, otherwise disable it in WordPress (or via plugin, or in functions.php). I’d suggest you to either: Create a Firewall Rule and make sure to present JS Challenge for each request on the wp-login.php path Add Google reCaptcha on the login form via plugin Limit countries which can access, while other’s will be presented with the Cloudflare’s 1020 error page The other way would be to configure and use Cloudflare Acce…

@yogeshpatel37

what are the consequences in the case when I can’t login

Where? Into the WordPress admin or Cloudflare dashboard?
If it’s about WP admin, then hopefully you have access to the CF dash so you can tweak this and modify as needed.