Hiding Craft's admin folder from search engines
So if you follow best practices, the craft/ directory should just never be in the public webserver root to begin with. And if it's not, search engines are never going to be able to index it.

The directories should look like this:


craft/
public/


In other words, they are side by site, and Craft is never in the public web server directory.

Craft's admin/login pages already send the x-robots-tag: none header, which tells Google et al not to index those pages. Learn More



I've created many Craft sites over the years, all of them still have /admin as the AdminCP trigger, none of them have been indexed, and I've had zero security breaches/brute force attacks.

Doesn't mean it can't/won't happen, but security through obscurity only gets you so far anyway. Put the craft/ directory out of the public root, follow the advice in Hardening Craft CMS Permissions and sleep well at night.