When I installed the plugin, and saw, that it really changes the login URL, I was super happy and gave it a 5 star rating. Then, after a few hours I saw a rise in the number of brute force password guessing attacks, which -I think- means, that someone guessed the new login URL in a few hours. So I’ve added some special characters into my endpoint. As a result, now I can’t guess my login URL either. It’s unfortunately not, what I set. The description of the two star rating is, that the plugin works. I’m really sorry, but at this point I have to say, that it does not.