To secure your admin area from hackers, we recommend that you allow access only from a selected IP address to your admin directory. You need to create a .htaccess file in the directory where you want to restrict access to specific IP addresses.

For example, if you have a WordPress blog installed on your main directory and log in via hostnali.co.ke/wp-admin, you should create an .htaccess file in /wp-admin/.htaccess, and you should put the following code into it. Don’t forget to replace the allowed IP address with your IP address.

order deny, allow
deny from all
allow from YOUR-IP-ADDRESS-HERE

(Replace “Your-IP-Address-Here” text with your IP Address)

You can test this by accessing your /wp-admin IP address from another IP address, which is not mentioned in your .htaccess file.