We Need a Getting Started Guide

I installed this plug-in as I’m a security-minded individual. Upon activation I chose to apply the default recommended settings button which seemed to indicate the admin login URL would not be modified.

After applying the default settings I opened a separate private browsing window and attempted to navigate to wp-admin and wp-login URLs but they were long gone—fine with me except for one oversight:

If the User applying the default recommended settings is in an Administrator role they should receive information indicating the new login URL immediately when it is changed—and not via an abstraction like email.

Without clear direction as to how to regain entry to the site after application of default settings I’m afraid, under common circumstances, it would be easy for a user to inadvertently lock themselves out.

Here are my recommendations:

1. Create a getting started guide
2. Link to the getting started guide below the default recommended settings button
3. Ensure admin login URLs are not modified until confirmed via email

Similarly, the test email links in the plugin do not clearly indicate which user test emails will be sent to—a bit confusing given a site owner many not the person configuring the plugin for the first time.

Thank you for time and understanding. Looking forward to giving this plugin another shot after I bring my site live.