Digital Web Tutor

<p><strong>DominoGuard</strong> is a focused, minimalistic security solution for WordPress. Designed to be fast and lightweight, it provides the essential security features every website needs with a clean configuration.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Limit Login Attempts</strong>: Automatically block IPs for 15 minutes after 5 continuous failed login attempts, keeping brute-force attacks at bay.</li>
<li><strong>Email Two-Factor Authentication (2FA)</strong>: Add an extra layer of security for Administrators. When enabled, logging in requires a 6-digit code sent to the admin’s email address.</li>
<li><strong>Brute Force Protection</strong>: Easily disable XML-RPC, a common vector for brute force and pingback attacks.</li>
<li><strong>Block User Enumeration</strong>: Prevent attackers from discovering your administrator username by blocking <code>/?author=N</code> query scans.</li>
<li><strong>Basic Firewall</strong>: A lightweight WAF that silently blocks simple directory traversal attempts (<code>../</code>) and basic malicious query strings commonly found in automated SQL injections.</li>
</ul>
<h4>Why DominoGuard?</h4>
<p>Many security plugins suffer from excessive features that can impact performance. DominoGuard focuses on delivering efficient performance by utilizing standard WordPress functions, keeping your site secure with minimal resource usage.</p>


DominoGuard Security

A minimalistic, lightweight security plugin offering limit login attempts, brute force protection, email 2FA, and a basic firewall.

wpdo

<p>In one click, your WordPress login page will be pretected with the smart brute force attack protection! Any login attempts more than 6 in 10 minutes (default value) will be limited.</p>
<p>Limit the number of login attempts through both the login and the auth cookies.</p>
<ul>
<li>
<p>Two-factor Authentication login.</p>
</li>
<li>
<p>Text SMS message passcode for 2nd step verification support.</p>
</li>
<li>
<p>Cloudflare Turnstile (better than Google reCAPTCHA).</p>
</li>
<li>
<p>GeoLocation (Continent/Country/City) or IP range to limit login attempts.</p>
</li>
<li>
<p>Passwordless login link.</p>
</li>
<li>
<p>Support Whitelist and Blacklist.</p>
</li>
<li>
<p>GDPR compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed).</p>
</li>
<li>
<p>WooCommerce Login supported.</p>
</li>
<li>
<p>XMLRPC gateway protection.</p>
</li>
</ul>
<h4>API</h4>
<ul>
<li>
<p>Call the function <code>$link = function_exists( 'dologin_gen_link' ) ? dologin_gen_link( 'your plugin name or tag' ) : '';</code> to generate one passwordless login link for the current user.</p>
</li>
<li>
<p>Call the function <code>$link = function_exists( 'dologin_gen_link' ) ? dologin_gen_link( 'note/tip for this generation', $user_id ) : '';</code> to generate a passwordless login link for the user which ID is <code>$user_id</code>.</p>
</li>
</ul>
<p>The generated one-time used link will be expired after 7 days.</p>
<ul>
<li>Define const <code>SILENCE_INSTALL</code> to avoid redirecting to setting page after installtion.</li>
</ul>
<h4>CLI</h4>
<ul>
<li>
<p>List all passwordless links: <code>wp dologin list</code></p>
</li>
<li>
<p>Generate a passwordless link for one username (for the login name <code>root</code>): <code>wp dologin gen root</code></p>
</li>
<li>
<p>Delete a passwordless link w/ the ID in list (for the record w/ ID 5): <code>wp dologin del 5</code></p>
</li>
</ul>
<h4>How GeoLocation works</h4>
<p>When visitors hit the login page, this plugin will lookup the Geolocation info from API, compare the Geolocation setting (if has) with the whitelist/blacklist to decide if allow login attempts.</p>
<h3>Privacy</h3>
<p>The online IP lookup service is provided by https://www.doapi.us. The provider’s privacy policy is https://www.doapi.us/privacy.</p>
<p>Based on the original code from Limit Login Attemps plugin and Limit Login Attemps Reloaded plugin.</p>


DoLogin Security

Easy Login. 2FA login. Passwordless login. Cloudflare Turnstile reCAPTCHA. GeoLocation (Continent/Country/City)/IP range to limit login attempts.

DominoGuard Security vs DoLogin Security