24 Tech Time

Johnious Tumusiime

24TT Login Security and Brander is an enterprise-grade, zero-bloat security and white-labeling solution for WordPress. Designed for agencies and security-conscious site owners, it fortifies your WordPress perimeter while delivering a seamless, custom-branded login experience for your clients.
Instead of relying on heavy frameworks, this plugin uses native WordPress APIs and strictly optimized PHP to protect your site without slowing it down.
<h3>🛡️ Enterprise Perimeter Defense</h3>
<ul>
<li>Hide wp-login.php & /wp-admin/: Completely obfuscate your login portal. Bots and unauthenticated guests attempting to access default login routes are silently redirected to your homepage before core authentication redirects even trigger.</li>
<li>Brute Force Protection: Transient-based Limit Login Attempts. Locks out attackers for 15 minutes after 3 failed attempts, intercepting them at Priority 1 before heavy database queries execute.</li>
<li>Kill XML-RPC: Permanently disables XML-RPC to shut down massive DDoS and brute-force vectors.</li>
<li>Block User Enumeration: Prevents hackers from scraping usernames via author archives (<code>/?author=1</code>) and the REST API.</li>
<li>Generic Error Masking: Overwrites default login errors so attackers cannot verify if a username exists.</li>
</ul>
<h3>🎨 Agency-Grade Brander</h3>
<ul>
<li>Custom Login Logo: Replace the default WordPress logo with your client’s brand.</li>
<li>Custom Colors: Tailor the background and primary button colors using the native WordPress Color Picker.</li>
<li>Smart Contrast Calculator: Automatically detects if your background is light or dark (using the YIQ formula), adjusting the “Lost Password” and “Back to Site” links to guarantee 100% visual accessibility.</li>
<li>Role-Based Redirects: Automatically route administrators to the backend dashboard, while sending clients or subscribers to a custom URL (like a user portal).</li>
</ul>

24TT Login Security and Brander

Agency-level visual branding alongside critical perimeter defense, login obfuscation, and strict access controls.

oliverdoo

Hide Login Shield allows you to change the default login URL from <code>wp-login.php</code> to a custom path. This increases security by obscuring the standard login route that attackers typically target.
Key Features: 
* Easily set a custom login URL (e.g., <code>yoursite.com/mylogin</code>). 
* Redirects attempts to access the default login page to your homepage. 
* If you forget the custom login URL, you can restore access by disabling or removing the plugin via FTP or your hosting file manager.
This plugin enhances security by making it harder for unauthorized users to guess your login URL. It uses WordPress hooks and rewrite rules without modifying core files.

Hide Login Shield

Enhance your site's security by customizing the default login URL and hiding the standard login page.

24TT Login Security and Brander vs Hide Login Shield