No, and the screen says so. Anybody who watches one request, or reads the HTML of a page that links to the form, can find the new address. It is not a lock.
What it does is stop machines finding the page, which on most sites is thousands of requests a month that arrive as a 404 instead of as a password check. Worth doing for the quiet. Not worth relying on.
Still stuck? Ask the developers who wrote it. We aim to reply within one business day.
Login Security
Stop the machines guessing at your passwords, and see exactly who has been trying.
From $19 a year · every feature · 30-day refund
