I have a Wordpress site on a VPS which keeps getting attached on xmlrpc and wp logins. As part of combatting this I password protected the wp-admin directory (via Cpanel 'Directory Privacy') - but when I go to test it I get browsers not loading the page due to 'too many redirects' (Safari and Chrome). As a plan B I've installed a WP plugin to rename the wp-admin address, but logging in to that redirects back to the same login page instead of successfully going to the dashboard, which also seems like a redirection. Any possible solutions or logs I can look in that might shed some light?

2 Answers 2


Password protecting the wp-admin directory is not very helpful because wp-admin redirecting to yourdomain.com/wp-login.php

It is best to use two steps authentication or limit the number of login attempts.

  • OK, so its behaving as you'd expect - not an error? Think I;ll go and leave a comment on the website that suggested it! Thanks!
    – iain-g
    Feb 23, 2017 at 16:20

The "too many redirects" error can happen depending on server settings. The way to fix it is:

  1. Find the .htaccess file in your Wordpress installation (by default it'll be in the document root).
  2. Edit this file, by adding the below line to it:

    ErrorDocument 401 default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.