This project is not covered by Drupal’s security advisory policy.
Login Paths serves the user login form on one or more custom paths, such as /members/login and /staff/login, each with its own page title.
Features
- Several login paths, configured from the admin UI and exportable as configuration.
- Disable
/user/login: bots probing the default URL get a 404. The core login route moves to your first path, so the "Log in" menu link and every redirect to the login page keep working. - Disable the JSON login endpoint (
/user/login?_format=json) separately. - Redirect after login by role, with a default for everybody else. A
destinationparameter still takes precedence. - Theme per login path, or the Gin Login design automatically when that module is enabled.
- Lockout protection:
/user/logincannot be disabled until another login path exists.
Similar projects
- Rename Admin Paths renames
/userand/adminas a whole. Login Paths only touches the login page and lets you have several of them. - Login And Logout Redirect Per Role covers redirects only.
AI disclosure
This module was written with the help of an AI assistant. The maintainer reviewed, tested and is responsible for all of the code.
Requirements
Drupal 10.3 or 11. No other modules required.
Supporting organizations:
Sponsored the development time. The module was first built for a client project and then made generic for contribution.
| Attachment | Size |
|---|---|
| Module Configuration | 108.22 KB |
Project information
Minimally maintained
Maintainers monitor issues, but fast responses are not guaranteed.- Project categories: Access control, Security, User engagement
- Created by fernandogonzalezv on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
Releases
1.0.0-alpha1
released 15 October 2026
Works with Drupal: ^10.3 || ^11
Initial alpha release: custom login paths, optional /user/login disabling and role-based redirects.
Install:

