User-agent: * Disallow: /wp-login.php Disallow: /wp-login.php?*$ Disallow: /wp-login.php?action=lostpassword