Digital Web Tutor

DominoGuard is a focused, minimalistic security solution for WordPress. Designed to be fast and lightweight, it provides the essential security features every website needs with a clean configuration.
<h4>Key Features</h4>
<ul>
<li>Limit Login Attempts: Automatically block IPs for 15 minutes after 5 continuous failed login attempts, keeping brute-force attacks at bay.</li>
<li>Email Two-Factor Authentication (2FA): Add an extra layer of security for Administrators. When enabled, logging in requires a 6-digit code sent to the admin’s email address.</li>
<li>Brute Force Protection: Easily disable XML-RPC, a common vector for brute force and pingback attacks.</li>
<li>Block User Enumeration: Prevent attackers from discovering your administrator username by blocking <code>/?author=N</code> query scans.</li>
<li>Basic Firewall: A lightweight WAF that silently blocks simple directory traversal attempts (<code>../</code>) and basic malicious query strings commonly found in automated SQL injections.</li>
</ul>
<h4>Why DominoGuard?</h4>
Many security plugins suffer from excessive features that can impact performance. DominoGuard focuses on delivering efficient performance by utilizing standard WordPress functions, keeping your site secure with minimal resource usage.

DominoGuard Security

A minimalistic, lightweight security plugin offering limit login attempts, brute force protection, email 2FA, and a basic firewall.

maheshkathiriya

If you run a WordPress website, you should absolutely use “Secure-Admin-Access” to secure it against hackers.
Secure Admin Access fixes a glaring security hole in the WordPress community: the well-known problem of the admin panel URL. 
Everyone knows where the admin panel, and this includes hackers as well.
Secure Admin Access helps solve this problem by allowing webmasters to customize their admin panel URL and blocking the default links.
After you setup Secure Admin Access, webmasters will be able to change the “yourwebsitename.com/wp-admin” link into something like “yourwebsitename.com/your-custom-string”. 
All queries for the classic “/wp-admin/” and “wp-login.php” files will be redirected to the homepage, while access to the WP backend will be allowed only for the custom URL.
The plugin also comes with some access filters, allowing webmasters to restrict guest and registered users access to wp-admin, just in case you want some of your editors to log in the classic way.
NOTE :Back up your database before beginning the activate plugin. 
It is extremely important to back up your database before beginning the activate plugin. If, for some reason, you find it necessary to restore your database from these backups. Plugin will not work for IIS.
<h4>Features</h4>
<ul>
<li>Limit Dashboard access to admins only, admins + editors, admins + editors + authors, or limit by specific capability.</li>
<li>Create your own redirect URL</li>
<li>Optionally allow user profile access</li>
<li>Define custom wp-admin url(Like http://yourdomain.com/mypanel)</li>
<li>Define custom Logo OR change default logo on login page</li>
<li>Define body background color on login page </li>
<li>SEO friendly URL for “Register” page (Like http://yourdomain.com/mypanel/register)</li>
<li>SEO friendly URL for “Lost Password” page (Like http://yourdomain.com/mypanel/lostpassword)</li>
<li>Restrict guest users for access to wp-admin</li>
<li>Restrict registered non-admin users from wp-admin</li>
<li>Allow admin access to non-admin users by define comma seprate multiple ids users </li>
<li>Login Security </li>
<li>Limit Login Attempts and track user login attempts</li>
<li>Login attempts and block IP temporarily</li>
<li>Much more!</li>
</ul>

Secure Admin Access

Secure Your Website Admin And Dashboard Access & Modify Login Page Design & Login Attempts for login protection

DominoGuard Security vs Secure Admin Access