Magento Open Source 2.3.x

Using a Custom Admin URL

As a security best practice, Magento recommends that you use a unique, custom AdminThe password-protected back office of your store where orders, catalog, content, and configurations are managed. URLUniform Resource Locator: The unique address of a page on the internet.  instead of the default “admin” or a common term such as “backend”. Although it will not directly protect your site from a determined bad actor, it can reduce exposure to scripts that try to gain unauthorized access.

Check with your hosting provider before implementing a custom Admin URL. Some hosting providers require a standard URL to meet firewall protection rules.

In a typical Magento installation, the Admin URL and path is immediately below the Magento base URL. The path to the store Admin is one directory below the root.

  • Default Base URL
    http://yourdomain.com/magento/
  • Default Admin URL and Path
    http://yourdomain.com/magento/admin

Although it is possible to change the Admin URL and path to another location, any mistake removes access to the Admin, and must be corrected from the server.

As a precaution, do not try to change the Admin URL by yourself unless you know how to edit configuration files on the server.