How to Change the /admin URL in MyBB
Changing the default MyBB Admin Control Panel directory from /admin to something custom is a simple way to make the ACP less obvious to automated scanners.
For example, instead of:
https://example.com/admin/
you could use:
https://example.com/sitecontrol/
Note: This is not a replacement for strong passwords, updates, 2FA where available, or proper server security. It mainly reduces exposure to automated probing.
Step 1: Rename the Admin Directory
Using SSH, FTP, or your hosting file manager, open your MyBB installation directory.
You should see a directory named:
admin
Rename it to something of your choosing. For example:
sitecontrol
Avoid making the new directory name easy to guess.
Step 2: Edit inc/config.php
Open:
inc/config.php
Look for the Admin CP directory setting:
$config['admin_dir'] = 'admin';
Change admin to your new directory name:
$config['admin_dir'] = 'sitecontrol';
The value must exactly match the directory you renamed in Step 1.
Save the file.
Step 3: Test the New URL
Your old URL:
https://example.com/admin/
should no longer contain your Admin CP.
Instead, visit:
https://example.com/sitecontrol/
You should see the normal MyBB administrator login page.
Log in and make sure the ACP functions normally.
Step 4: Keep the New URL Private
There's little benefit in changing the directory and then publicly exposing the new location everywhere.
Also remember that changing /admin doesn't make the ACP inherently secure. An attacker could potentially discover the new path through other means.
For additional protection, consider combining this with:
- A strong, unique administrator password
- Two-factor authentication if your setup supports it
- Cloudflare/WAF protection
- Server firewall protection
- Keeping MyBB and plugins updated
- Restricting ACP access by IP at the web-server or firewall level when practical
- An additional HTTP authentication layer in front of the ACP
That's It
The basic process is simply:
Rename /admin
↓
Update $config['admin_dir']
↓
Visit the new URL
↓
Verify ACP works
It's a quick MyBB hardening step that can cut down on automated requests targeting the default /admin location.
