White-Label WordPress Login Pages: A No-Code Setup Guide

You hand a client a finished website. The design is theirs, the copy is theirs, and then they open wp-login.php for the first time and see the WordPress logo. Click it and it opens wordpress.org. To a client who just paid for a custom brand, that looks like unfinished work, and it is the page their whole team sees every day.

This guide shows how to replace that screen with your client’s own logo, colors, and background, without writing code if you prefer not to. It compares the three realistic ways to do it, walks through setup with our free login plugin, and covers what a branded login page does not do, so you can set accurate expectations with the client.

What the default login page tells your client

Out of the box, the WordPress login screen shows the WordPress logo, and that logo links to wordpress.org. The link text reads “Powered by WordPress.” None of that is wrong, but it tells every editor, shop manager, and contractor that the site is a stock install. For an agency, it also means your client’s staff have no visual cue they are in the right place, which is what generates “is this the real login?” emails.

A branded login page fixes the first impression, and it is a small, visible detail that agency partners can offer as part of a white-label handover.

Three ways to white-label the WordPress login page

For a logo swap and a new link, a snippet is enough. For a full branded screen across many client sites, a plugin saves time. For role-based redirects or custom fields, you need custom development.

Option 1: the snippet route

WordPress gives you two filters for the logo link and the logo text, and an action for adding CSS to the login page:

add_filter( 'login_headerurl', function () {
    return home_url( '/' );
} );

add_filter( 'login_headertext', function () {
    return get_bloginfo( 'name' );
} );

add_action( 'login_enqueue_scripts', function () { ?>
    <style>
        body.login { background: #f4f6f8; }
        #login h1 a {
            background-image: url( <?php echo esc_url( get_stylesheet_directory_uri() . '/images/login-logo.png' ); ?> );
            background-size: contain;
            width: 240px;
            height: 80px;
        }
    </style>
<?php } );

This sends the logo link to the site’s own homepage, sets the link text to the site name, and swaps the logo and background color. Put it in a small plugin rather than your theme’s functions.php, or the branding disappears the next time someone changes the theme. This is also the kind of thing that gets lost at handover, so write down where it lives.

Option 2: set it up with Devmont Login Builder

Devmont Login Builder is a free plugin that replaces the default login layout with a centered form card on a background you control. It requires WordPress 6.0 or higher and PHP 8.0 or higher.

1. Install and activate it. Go to Plugins, then Add New, search for Devmont Login Builder, then click Install and Activate.
2. Open its settings. A Devmont Login Builder menu appears in the admin dashboard. The settings page shows a live preview, so you can see changes before saving.
3. Add the client’s logo. Upload it, then set its width and height, the space above and below it, and its alignment. Upload a logo before you go live. If you skip this step, the plugin shows a bundled default image, not the client’s brand.
4. Set the background. Use a solid color or an image. For an image, you can set its size, position, repeat behavior, and opacity.
5. Style the form card. Set the card color or make it transparent, add a background image if you like, and adjust its width, height, padding, and opacity.
6. Style the fields and button. Set field colors, font size, padding, and borders, then the button’s colors, size, and corner radius. Label and “Forgot?” link colors are set separately.
7. Save and test in a private window. Log out, then open the login page in a private browser window so you see what a client’s staff will see.

What it does and does not change

Set these expectations with the client before handover:

• It replaces the login screen with its own layout. That is why the design control is wide, and also why you should test anything else that touches the login page.
• It covers login, lost password, and reset password. The registration screen keeps its default look.
• It changes how the screen looks, not who can get in. It does not hide or move the login URL and it adds no protection against attackers. For real hardening, start with our WordPress security guide. XML-RPC, for example, is a separate login path that a pretty login screen does not close, and we covered it in which WordPress features to disable.
• After a successful login, users land on the dashboard. If you need role-based redirects, that is custom work.
• Test it with your login-related plugins. Because the plugin draws its own form, plugins that add fields to the login form, such as two-factor codes or CAPTCHA, may not show those fields. Test on a staging site before you rely on it with either.

Design rules that keep it usable

A branded login screen should be easier to use than the default, not just prettier.

• Check contrast. Body text and button labels should reach a 4.5:1 contrast ratio against their background, the WCAG AA guideline for normal text. Pale brand colors on a white card often fail.
• Keep the logo small. A tall logo pushes the form below the fold on a phone.
• Keep the form readable on a phone. Staff log in from phones more than most agencies expect. Our mobile interface design guide covers tap targets and form friction.
• Do not hide the “Forgot?” link. Low-contrast reset links generate support requests.

Handover checklist

Branding that only one person understands becomes a support problem later. Record this for every client site:

• The logo file name and where the original lives
• The brand colors as hex codes, including card, button, and link colors
• The brand colors as hex codes, including card, button, and link colors
• The result of your test with the client’s security and login plugins
• Who to contact if the login page breaks after an update

If you would rather have us set up and maintain branded logins across your client sites, that sits inside our WordPress development and maintenance work.

Frequently Asked Questions