Block access to wp-admin

Placing the htaccess file in the wp-admin directory did not work for me so I went a different route and it seems to be working very well. Below is what I have in my main htaccess file:

<files wp-login.php>
# set up rule order
order deny,allow
# default deny
deny from all
allow from x.x.x.x
allow from y.y.y.y
allow from z.z.z.z
</files>

ErrorDocument 401 default
ErrorDocument 403 default
ErrorDocument 404 default

Related Posts:

  1. Change Login URL Without Plugin
  2. Securing wp-admin folder – Purpose? Importance?
  3. Options for restricting access to wp-admin
  4. How to change “wp-admin” to something else without search-replacing the core?
  5. Should I add the IP of the server that hosts my sites to the list of authorized IPs in the wp-admin/.htaccess?
  6. How to Change The WordPress Login URL Without Plugin
  7. 404 redirect wp-login and wp-admin after changing login url [closed]
  8. Couple questions about .htaccess, login page, updates
  9. Can I rename the wp-admin folder?
  10. “Too many redirects” ONLY when trying to access wp-admin page
  11. Use a different domain for SSL
  12. What is the best method to close off the backend?
  13. .htaccess in wp-admin produces a redirect loop
  14. Share same domain for wp-admin but for different website
  15. Wrong canonical link on wp-admin pages
  16. Can I rename the wp-admin folder?
  17. WordPress in sub directory wp-admin problem
  18. .htaccess rewrite rule for removing .php extension with exception of wp login and wp-admin
  19. Can’t access admin dashboard with wp-admin without /index.php after it
  20. Why should I password protect WP-Admin?
  21. Call to undefined function insert_with_markers
  22. Cannot log into WordPress Dashboard after removing/adding .htaccess
  23. Change WP-Login or WP-Admin
  24. Which HTTP headers to use for subdomain embedding?
  25. CDN + WP Admin Query – .htaccess redirection
  26. From 403 error to 500 internal server error
  27. FORCE_SSL_ADMIN not working
  28. Cannot Access Admin Area After Migration
  29. Wrong wp-admin URL
  30. Limit access to wp_admin
  31. I want to disable login of admin (/wp-admin) with email and make it accessible only with username
  32. password reset link being sent as HTTP?
  33. How do I host WordPress on a hidden domain through a reverse proxy?
  34. Logout USER form backoffice after 30 minutes of inactivity [closed]
  35. Do I have to face security problems if I changing default role to Contributor
  36. Hide username discovery
  37. Efficient way to check local WordPress php files and Database for malicious code? [duplicate]
  38. Renaming wp-admin without hard-coding it. Is it really possible?
  39. Need help for WordPress User Session Management?
  40. How login is possible, if I deny login page via .htaccess with allow ip
  41. Developer/Designer asking for admin access
  42. Redirect an entire WordPress site on a subdomain, except wp-admin
  43. Blank page when viewing wp-admin
  44. Is WordPress secure enough for a multi-user article directory?
  45. wp-admin going directly to 404
  46. WordPress /wp-admin redirect to wrong port in docker
  47. wp-admin and wp-login.php not Accessible after Cloudflare
  48. Can I rename the wp-admin folder?
  49. CSRF attack to create USER
  50. Disabling WP-Admin Caching in htaccess
  51. Can I rename the wp-admin folder?
  52. Limit access to wp-admin but still be able to log in from different locations?
  53. SSL doesn’t deliver parts of WordPress Administration Module
  54. Why WordPress not logout after I have close my browser?
  55. Making WP Admin Folder accessable JUST under a different link
  56. How to protect wp-admin from third party access?
  57. is exposed wp-admin site a serious security vulnerability
  58. Can a user submit requests to wp-admin/admin.php without logging in?
  59. Wildcard multisite wp-admin url wrongfully redirected
  60. I found this in a plugin. What does it do? is it dangerous?
  61. How to create sub menu with a URL parameter?
  62. Can initial focus be set to search field in WordPress Media Library?
  63. When attempting to update a self-hosted WordPress site, I’m seeing “ASN1 unknown message digest algorithm”
  64. How to create a wp admin page (for use in an ajax request)
  65. Removing user fields [duplicate]
  66. Creating WordPress Admin Themes
  67. Add “Page Revised” column to Admin
  68. admin_url in plugins
  69. Share Tags Between Custom Posts in Admin
  70. Filter dropdown in users.php “delete user” bulk edit screen
  71. Cannot find an OLD Gravity Form on an OLD Word Press site [closed]
  72. Where did the screen options menu go?
  73. WordPress notification reports
  74. Page update through theme editor caused wp admin to break
  75. post-new.php?post_type=product is not loading properly
  76. How to use underscore.js in WordPress Admin
  77. meta box on new admin page
  78. Site Crashes When Updating to WordPress (Version 3.6)
  79. Change of IP Address
  80. How can I control which plugins run in the dashboard?
  81. WP Admin Login keeps redirecting to login
  82. WordPress admin section appears broken
  83. Wp-admin widgets have no title texts
  84. How to create directory under my active theme directory
  85. CPU overload spam – redirect link to wp-admin and new post
  86. define two login page url
  87. On Users (user.php) in wp-admin disable/hide “Bulk Actions” and “Change Role To”
  88. Redirect from wp-admin back to page
  89. How can I can I make changes to a WP project I pulled from GItHub?
  90. WordPress critical error on wp-admin page with 100% permissions
  91. All files in public_html, Cannot launch WordPress site via wp-admin
  92. Add item to admin panel – w/o plugin & theme
  93. Show only childs and grandchilds of certain post in admin
  94. Creating another wordpress site as sub-domain of a wordpress site
  95. Is it possible to change the images source that are shown in the admin side?
  96. Using query string on edit CPT page
  97. $current_screen if condition for a specific page in admin
  98. All of my WordPress sites have Bold Open Sans
  99. After Upgrade: $user becomes unknown (id: 0) after successful login?
  100. Why is this line of code Wrong in every WordPress .Htaccess security article?