Hi Suman,
Thanks for your reply however that’s not exactly the issue. I’m aware that we can change the wp-login.php name however the issue is that when someone clicks to reset their password, the new wp-login name is exposed!
Upon further research it appears that HMWP can’t achieve this so I’ve found an alternative plugin which enables the admin to create a new password reset page and redirect password reset requests, completely hiding any reference to the wp-login page.
I’m open to any further suggestions here otherwise we can close off the case.