Hiding Craft's admin folder from search engines I am trying to hide our website's admin directory from public view as best as possible and have read the Securing Craft article. I am pleased at how easy it is to make a directory that isn't easy to guess using the cpTrigger setting in the config file. 

My next thought was to disallow the directory on the robot.txt file, keeping crawlers from indexing the login page. The obvious issue with that is that now the "hidden" admin directory is in public view from our robot.txt file, not exactly what I want to do.

Is there something in the metatags or HTML of the Craft admin pages that blocks crawlers from indexing the admin pages? I was hoping to see the following on the admin pages:
    
But they are not present. Is there a reason we would not want these by default on the Craft admin pages?

Please advise on the best practice here, perhaps I am overthinking things, or there is another way altogether to accomplish this.
So if you follow best practices, the craft/ directory should just never be in the public webserver root to begin with. And if it's not, search engines are never going to be able to index it.

The directories should look like this:


craft/
public/


In other words, they are side by site, and Craft is never in the public web server directory.

Craft's admin/login pages already send the x-robots-tag: none header, which tells Google et al not to index those pages. Learn More



I've created many Craft sites over the years, all of them still have /admin as the AdminCP trigger, none of them have been indexed, and I've had zero security breaches/brute force attacks.

Doesn't mean it can't/won't happen, but security through obscurity only gets you so far anyway. Put the craft/ directory out of the public root, follow the advice in Hardening Craft CMS Permissions and sleep well at night.