tildemark

<p>This plugin will completely disable or deactivate XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website using XML-RPC.</p>
<p>By using the plugin, it will remove your ability to post using XML-RPC protocol, which means no more,</p>
<ul>
<li>post ping backs, </li>
<li>remote post from WordPress mobile app, </li>
<li>remote post from windows live writer, </li>
<li>and other applications that requires XML-RPC.</li>
</ul>


Deactivate XML-RPC on WordPress

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

Andrea Ercolino

<p>Login Dongle protects your login by means of a <a href="http://en.wikipedia.org/wiki/Security_question" rel="nofollow ugc">security question</a><br />
(AKA challenge/response) as an extra security layer. A bookmark is your login dongle.</p>
<h4>How it works</h4>
<ol>
<li>Go to your standard login page, fill in the form as usual, and click the bookmark.</li>
<li>A prompt asks the challenge. Fill in the response, and accept.
</li>
</ol>
<p>https://www.youtube.com/watch?v=9zejJewYVi4</p>
<h4>Why it works</h4>
<ul>
<li>Under the hood, the bookmark submits login data, together with the challenge and response.</li>
<li>If both challenge and response validate on the server, the login process goes on as usual, otherwise it dies.</li>
<li>The login page stays exactly the same as usual, so attackers won’t know how to guess challenge and response.</li>
<li>Only you know the response to the challenge, so nobody but you will be able to use the bookmarlet.</li>
<li>People using your PC won’t be able to login even if your browser fills in the login form with your password.</li>
</ul>
<p>Login Dongle is compatible with any other login plugin.</p>
<p>For more info, please refer to the <a href="https://wordpress.org/extend/plugins/login-dongle/faq/" rel="ugc">FAQ</a><br />
and the user’s instructions you’ll find on the settings page after activating the plugin.</p>
<h4>User Guides</h4>
<ul>
<li>Dutch: http://www.wpsitemaken.nl/login-dongle</li>
<li>English: http://www.itechdestiny.com/wordpress-security-with-login-dongle-plugin/</li>
<li>English: http://www.shoutmeloud.com/secure-wordpress-login.html</li>
<li>French: http://neosting.net/comment-securiser-acces-login-wordpress-2-etapes</li>
<li>German: https://wordpress.org/support/topic/excellent-plugin-110</li>
<li>Japanese: http://wp.8jimeyo.info/plugin/login-dongle/</li>
<li>Turkish: http://hakanertr.wordpress.com/2012/07/24/login-dongle/</li>
</ul>
<h4>Quick Reviews</h4>
<ul>
<li>http://forum.ait-pro.com/forums/topic/compatibility-question-for-custom-login/</li>
<li>http://webscripts.softpedia.com/script/Modules/WordPress-Plugins/Login-Dongle-80067.html</li>
<li>https://wordpress.org/support/topic/plugin-login-dongle-clever-plugin</li>
<li>http://www.evohosting.co.uk/blog/web-development/wordpress-web-development/6-of-the-best-wordpress-security-plugins/</li>
<li>http://www.labnol.org/internet/improve-wordpress-security/24639/</li>
<li>https://www.linkedin.com/groups/Security-suggestions-1482937.S.199139568#commentID_110730071</li>
<li>http://www.practicalwp.com/login-dongle-login-bookmarklet-for-wordpress/</li>
<li>http://www.wtfdiary.com/2012/08/8-ways-to-secure-your-wordpress-blog.html</li>
</ul>
<h4>Available translations</h4>
<ul>
<li>English (Andrea Ercolino)</li>
<li>Serbian (Borisa Djuraskovic)</li>
<li>Spanish (Andrea Ercolino)</li>
<li>Turkish (Hakan Er)</li>
</ul>
<p>NOTE: Here ‘bookmark’ and ‘bookmarklet’ are used interchangeably.</p>
<h3>Uninstall Instructions</h3>
<ol>
<li>Click the <em>Delete</em> button in the <em>Plugins/Installed Plugins</em> list.</li>
</ol>
<p>If you manually removed the <em>login-dongle</em> plugin directory, or if your version was prior to 1.4.0,<br />
some garbage is left into your database. It’s harmless, but if you still want to clean it up, access<br />
the <em>options</em> table and remove all the rows whose <em>option_name</em> column start with <em>login_dongle</em>.</p>
<p>If your version was prior to 1.1.0, edit the <em>wp-login.php</em> file in the root<br />
directory of your blog and remove the line that begins with <code>do_action('login-start');</code></p>
<h3>Banner</h3>
<p>From <a href="http://www.flickr.com/photos/fotologic/4891100379" rel="nofollow ugc">Rusty door</a>, taken by<br />
<a href="http://www.flickr.com/photos/fotologic/" rel="nofollow ugc">fotologic</a> on August 14, 2010 in Penbryn, Wales, GB.</p>


Login Dongle

The bookmark to login nobody but you. Simple and secure.

Deactivate XML-RPC on WordPress vs Login Dongle