JoomION Admin URL replaces Joomla’s standard backend path

Its job is to make the backend login available through a chosen or randomly generated path instead of /administrator, with an option to block direct requests to the standard path.

This is a recurring concern because automated scanners commonly look for predictable CMS login URLs. Joomla core already provides the more important controls: user groups and access levels, password management, and multi-factor authentication. Server rules can also restrict backend access by IP or other conditions. What core does not provide is a setting to rename or relocate the administrator entry point. A template override is not relevant to this part of Joomla, so site owners either leave the standard path in place, add server-level restrictions, or use an extension such as this one. According to the listing, JoomION Admin URL goes beyond core by routing a custom path to the administrator login and optionally denying unauthorised requests to /administrator.

It is aimed at Joomla site owners and agencies managing public sites where reducing routine bot traffic is useful, particularly when server-level access rules are impractical. It has little to offer a private site already protected by a firewall or IP allowlist, and it is not a substitute for strong passwords or two-factor authentication.

The extension is free software under GPL v2 or later, with updates through Joomla’s native updater. The directory lists JoomION as having two other extensions, but this listing has no reviews. Before installing, check how the custom routing behaves with a host’s rewrite rules, caching, reverse proxies, maintenance tools, and recovery procedures. The listing does not explain the implementation details, logging, interactions with other security extensions, or support arrangements. It states compatibility with Joomla 5 and 6.

Listed on the Joomla Extensions Directory.