supersoju

<p><strong>Block Logins with Cloudflare</strong> helps protect your WordPress site from brute-force attacks by blocking IPs at the Cloudflare firewall after a configurable number of failed login attempts.</p>
<ul>
<li>Block IPs via Cloudflare after X failed login attempts</li>
<li>Block IPs that generate excessive 404 responses (bots and scanners)</li>
<li>Block IPs attacking via XML-RPC with intelligent detection</li>
<li>Automatic unblocking after a configurable duration</li>
<li>Whitelist IPs to never block or track them (supports IPv6 CIDR ranges)</li>
<li>View and manually unblock blocked IPs from the admin</li>
<li>Block source tracking — see whether each IP was blocked via login, XML-RPC, or 404</li>
<li>Sync existing Cloudflare blocks into the local blocked IPs list</li>
<li>Secure settings page with Cloudflare API token validation</li>
<li>Hourly cron job for automatic maintenance</li>
</ul>
<h3>External Services</h3>
<p>This plugin relies on the <strong>Cloudflare API</strong> to function. It communicates with Cloudflare’s external servers to block IP addresses at the firewall level.</p>
<p><strong>What is the Cloudflare API and what is it used for?</strong><br />
The Cloudflare API is a RESTful service provided by Cloudflare, Inc. that allows programmatic management of Cloudflare firewall rules. This plugin uses it to automatically block and unblock IP addresses based on failed login attempts, XML-RPC attacks, and 404 scanning activity.</p>
<p><strong>What data is sent and when?</strong><br />
The plugin sends the following data to Cloudflare’s API servers:</p>
<ol>
<li>
<p><strong>During settings validation</strong> (when you save Cloudflare credentials):</p>
<ul>
<li>Your Cloudflare API token (for verification)</li>
<li>Endpoint: <code>https://api.cloudflare.com/client/v4/user/tokens/verify</code></li>
</ul>
</li>
<li>
<p><strong>When blocking an IP</strong> (after a threshold is reached):</p>
<ul>
<li>The IP address to be blocked</li>
<li>Your Cloudflare email address and API key/token</li>
<li>Your Cloudflare Zone ID</li>
<li>A note describing the reason for the block</li>
<li>Endpoint: <code>https://api.cloudflare.com/client/v4/zones/{zone_id}/firewall/access_rules/rules</code></li>
</ul>
</li>
<li>
<p><strong>When syncing from Cloudflare</strong> (on demand):</p>
<ul>
<li>Fetches existing firewall rules from your Cloudflare zone</li>
<li>Endpoint: <code>https://api.cloudflare.com/client/v4/zones/{zone_id}/firewall/access_rules/rules</code></li>
</ul>
</li>
</ol>
<p>No personally identifiable information about your WordPress users is transmitted. Only IP addresses are sent to Cloudflare.</p>
<p><strong>Service provider information:</strong><br />
– Service: Cloudflare API<br />
– Provider: Cloudflare, Inc.<br />
– Terms of Service: https://www.cloudflare.com/terms/<br />
– Privacy Policy: https://www.cloudflare.com/privacypolicy/<br />
– API Documentation: https://developers.cloudflare.com/api/</p>
<p><strong>Required for functionality:</strong><br />
This plugin requires a Cloudflare account and will not function without valid Cloudflare API credentials. The external API calls are essential to the plugin’s core functionality.</p>
<h3>License</h3>
<p>GNU General Public License v2 or later</p>


Block Logins with Cloudflare

Block brute-force login attempts by integrating with Cloudflare's firewall to automatically block IPs after failed logins.

WPWhiteSecurity

Melapress

<p><strong> COMPREHENSIVE WORDPRESS LOGIN SECURITY PLUGIN </strong></p>
<p><a href="https://melapress.com/wordpress-login-security/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Melapress Login Security</a> enables you to effortlessly set login security policies that put you firmly in the driver’s seat of your WordPress sites. Policies are highly customizable and granular and can be implemented by user role or site-wide for complete control over the security of your WordPress login processes.</p>
<p>Use the free edition of Melapress Login Security to implement WordPress password requirements such as minimum length and complexity rules. The plugin also allows you to set password expiration policies, prevent password reuse, limit failed login attempts, and automatically disable inactive user accounts, among other things. This helps you:</p>
<ul>
<li>Prevent unauthorized login attempts</li>
<li>Protect against brute force attacks</li>
<li>Comply with GDPR with a login consent notice</li>
</ul>
<h3>🔐 Features list</h3>
<p>A secure WordPress login starts right here. Explore all of the features included with the free edition of <a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a>:</p>
<h3>Set password policies</h3>
<p>Strong passwords are your first line of defense against bad actors looking to gain access to your site. Set password requirement policies to make sure users set strong passwords. Set policies by user role or site-wide and define policy priority for users with multiple roles.</p>
<ul>
<li>Set minimum password length</li>
<li>Require uppercase and lowercase characters, numbers, and special characters</li>
<li>Set an automatic password expiration policy and advise users when their password is about to expire</li>
<li>Disallow users from reusing passwords</li>
<li>Provide users with helpful instructions during the password configuration stage</li>
<li>Disable password reset links</li>
<li>Mandate WordPress password reset on the first login</li>
</ul>
<h3>Limit login attempts</h3>
<p><a href="https://melapress.com/support/kb/melapress-login-security-failed-logins-policy-wordpress/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Limit failed login attempts</a> and put an end to brute force attacks. Protect your login form by automatically disabling user accounts after a number of failed login attempts. Choose between manual unlocking by an admin or automatic unlocking after a cooldown period.</p>
<h3>Temporary login without password</h3>
<p>Provide temporary and secure login access to third parties, like developers, editors, employees or others, without a password. It works by providing the user with a temporary login link that expires after a certain amount of time, or after a number of uses. This prevents you from having to create new user accounts manually, while simultaneously reducing the security risks associated with old, unused user accounts.</p>
<h3>Change WordPress login URL</h3>
<p>Easily deploy security-by-obscurity tactics and change your WordPress login page URL using a plugin! Hiding the default login page from hackers makes it more difficult to find, potentially reducing brute force attacks and other unauthorized access attempts. After you change the default wp-admin URL, you can set a 404 for the old login page or redirect it to any page of your choosing.</p>
<h3>Limit login page access by IP address(es)</h3>
<p>Limit access to the WordPress login page by IP address(es) for additional security.</p>
<h3>GDPR login page consent notice</h3>
<p>Easily meet GDPR requirements by adding a GDPR consent notice to the login page. This is required for GDPR and PCI DSS compliance, thus ensuring your WordPress site login page is in compliance.</p>
<h3>Emergency password reset</h3>
<p>Discovered suspicious behavior? Reset all users’ passwords with just one click and regain instant control.</p>
<h3>Upgrade to Melapress Login Security Premium and get even more benefits.</h3>
<p>The premium edition of Melapress Login Security comes bundled with even more features, which enable you to take your WordPress website login security to the next level. Disable inactive WordPress user accounts and force passwords to be reset once accounts have been unlocked. Inactive accounts can be managed within a single dashboard for increased efficiency and faster response times. Moreover, you can set accounts to be locked out after a number of failed login attempts and customize the duration and method of unlocking them.</p>
<h3>Premium features list</h3>
<ul>
<li><strong>Everything included in the free edition</strong></li>
<li><strong>Manually lock user accounts</strong> to immediately prevent login access for rarely used accounts or users on extended leave</li>
<li><strong>Add an extra security layer with security questions</strong> users must answer when performing sensitive actions such as password resets and account unlocks</li>
<li><strong>Receive email alerts for unrecognized device logins</strong>, with the option to remotely terminate the session</li>
<li><strong>Control user session duration</strong> by extending or shortening session timeouts to balance security and convenience</li>
<li><strong>One-click integration with third-party plugins</strong> such as WooCommerce, LearnDash, MemberPress, and many others</li>
<li><strong>Automatically <a href="https://melapress.com/inactive-users-wordpress/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">disable inactive WordPress users</a></strong> after a configurable period of inactivity</li>
<li><strong>Apply Geo-blocking rules</strong> to allow or block login access based on specific countries</li>
<li><strong><a href="https://melapress.com/support/kb/melapress-login-security-limit-login-ips/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Restrict users’ login to specific IP addresses</a></strong>, including support for multiple allowed IPs</li>
<li><strong><a href="https://melapress.com/support/kb/restrict-users-log-in-time-wordpress-website/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Restrict WordPress user login times</a></strong> by day and/or hours</li>
<li><strong>Limit login credentials</strong> to email address, username, or both</li>
<li><strong>Add a GDPR consent notice</strong> to the WordPress login page</li>
<li><strong>View detailed user security reports</strong>, including last activity, password age, and expired passwords</li>
<li><strong>Receive weekly email summary reports</strong> covering password resets, password changes, user account lockouts, and more</li>
</ul>
<p>|💎 <a href="https://melapress.com/wordpress-login-security/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">UPGRADE TO PREMIUM</a> |</p>
<h3>Why you should use Melapress Login Security</h3>
<p>Melapress Login Security is a WordPress plugin built from the ground up to help you improve the security of your user accounts and secure your WordPress login. Supercharge login credentials for maximum effectiveness and put a stop to unlimited login attempts, weak passwords, and inactive users. Set up policies to reduce your attack surface area such as login times restrictions, change the WordPress login URL, and much more.</p>
<h3>Free and premium support</h3>
<p>Support for the free edition of Melapress Login Security is free on the <a href="https://wordpress.org/support/plugin/melapress-login-security/" rel="ugc">WordPress support forums</a>. Premium world-class support via one-to-one email is available to the Premium users – <a href="https://melapress.com/wordpress-login-security/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">upgrade to premium</a> to benefit from priority support.</p>
<p>For any other queries, feedback, or if you simply want to get in touch with us, please use our <a href="https://melapress.com/contact/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">contact form</a>.</p>
<h4>MAINTAINED & SUPPORTED BY MELAPRESS</h4>
<p>Melapress builds high-quality WordPress security & admin plugins such as <a href="https://melapress.com/wordpress-2fa/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">WP 2FA</a>, <a href="https://melapress.com/wordpress-user-roles-editor/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Melapress Role Editor</a>,and <a href="https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">WP Activity Log</a>, the #1 user-rated activity log plugin for WordPress.</p>
<p><a href="https://melapress.com/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Visit our website</a> to see how our plugins can help you better manage and improve the security and administration of your WordPress websites and users.</p>
<h3>Install the plugin from within WordPress</h3>
<p>Keeping a secure WordPress login page is easy with <a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a>. Simply:</p>
<ol>
<li>From your WordPress dashboard, navigate to Plugins > Add New</li>
<li>Search for “<a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a>”</li>
<li>Install & activate <a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a> from your Plugins page</li>
</ol>
<h3>Install the plugin manually (via file upload)</h3>
<ol>
<li>Download the plugin from the WordPress plugins repository</li>
<li>Unzip the zip file and upload the folder to the <code>/wp-content/plugins/</code> directory</li>
<li>Activate the Melapress Login Security plugin through the Plugins page in WordPress</li>
</ol>


Melapress Login Security

Enforce WordPress login and password security policies to protect user accounts and prevent unauthorized logins.

Block Logins with Cloudflare vs Melapress Login Security