Adam Greenwell

Guard Dog is a comprehensive security plugin designed to protect your WordPress site from unauthorized access and brute-force attacks. With features like custom login URLs, two-factor authentication, and multiple CAPTCHA providers, Guard Dog provides enterprise-level security for any WordPress site.
Key Features:
<ul>
<li>Custom Login URLs – Hide your wp-admin and wp-login.php from attackers</li>
<li>Two-Factor Authentication (2FA) – TOTP-based authentication with recovery codes</li>
<li>Multiple CAPTCHA Providers – Support for Google reCAPTCHA v2/v3, hCaptcha, and Cloudflare Turnstile</li>
<li>Login Attempt Limiting – Prevent brute-force attacks with intelligent lockout</li>
<li>Access Control – IP-based whitelist/blacklist protection</li>
<li>Activity Monitoring – Comprehensive logging of security events</li>
<li>Temporary User Access – Create temporary WordPress users with time-limited, secure access</li>
<li>User Management – Advanced user permission controls</li>
</ul>
Why Choose Guard Dog?
<ul>
<li>Privacy-Focused – Multiple CAPTCHA options including privacy-first providers</li>
<li>WordPress.org Compliant – Built following WordPress coding standards</li>
<li>Enterprise-Ready – Scalable features suitable for any site size</li>
<li>User-Friendly – Intuitive interface with helpful documentation</li>
<li>Regular Updates – Actively maintained and updated</li>
</ul>
Perfect For:
<ul>
<li>Business websites requiring enhanced security</li>
<li>WordPress sites handling sensitive data</li>
<li>Multi-user sites with complex access requirements</li>
<li>Anyone wanting comprehensive protection without complexity</li>
</ul>
<h3>Additional Information</h3>
Support: 
For support questions, please use the WordPress.org support forums.
Privacy: 
Guard Dog respects user privacy and offers multiple privacy-focused CAPTCHA options. No data is transmitted to third parties except for CAPTCHA verification when enabled.
Security: 
Guard Dog follows WordPress security best practices and undergoes regular security audits. All user input is sanitized and all output is escaped.
<h3>Third-Party Services</h3>
Guard Dog integrates with the following third-party services to provide CAPTCHA protection. These services are optional and only used when CAPTCHA features are enabled.
<h3>Google reCAPTCHA (v2 and v3)</h3>
What it is: Google’s CAPTCHA service that helps protect websites from spam and abuse.
What it’s used for: 
– Verifying that login, registration, and password reset attempts are made by humans 
– Preventing automated bot attacks on your WordPress forms
What data is sent and when: 
– User interaction data (mouse movements, time spent on page) when CAPTCHA is solved 
– IP address of the user 
– Site domain for verification 
– CAPTCHA response token
Privacy and Terms: 
– <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google reCAPTCHA Privacy Policy</a> 
– <a href="https://policies.google.com/terms" rel="nofollow ugc">Google reCAPTCHA Terms of Service</a> 
– <a href="https://developers.google.com/recaptcha/docs/v3#data_usage" rel="nofollow ugc">Google reCAPTCHA Data Usage</a>
<h3>Cloudflare Turnstile</h3>
What it is: Cloudflare’s privacy-first CAPTCHA alternative that doesn’t require user interaction.
What it’s used for: 
– Invisible verification of human users during login, registration, and password reset 
– Privacy-focused protection without tracking or cookies
What data is sent and when: 
– Non-interactive browser signals when forms are submitted 
– IP address for verification 
– Site domain for validation
Privacy and Terms: 
– <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a> 
– <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a> 
– <a href="https://developers.cloudflare.com/turnstile/" rel="nofollow ugc">Turnstile Documentation</a>
<h3>hCaptcha</h3>
What it is: A privacy-focused CAPTCHA service that doesn’t track users across websites.
What it’s used for: 
– Human verification during login, registration, and password reset forms 
– Privacy-conscious alternative to Google reCAPTCHA
What data is sent and when: 
– User interaction with CAPTCHA challenge 
– IP address for verification 
– Site domain for validation
Privacy and Terms: 
– <a href="https://www.hcaptcha.com/privacy" rel="nofollow ugc">hCaptcha Privacy Policy</a> 
– <a href="https://www.hcaptcha.com/terms" rel="nofollow ugc">hCaptcha Terms of Service</a> 
– <a href="https://www.hcaptcha.com/data-processing" rel="nofollow ugc">hCaptcha Data Processing</a>
<h3>TOTP (Time-based One-Time Password) Standard</h3>
What it is: An open standard (RFC 6238) for generating time-based one-time passwords used in two-factor authentication.
What it’s used for: 
– Generating secure, time-limited authentication codes for 2FA 
– Providing backup authentication when primary 2FA methods are unavailable 
– Enabling compatibility with popular authenticator apps (Google Authenticator, Authy, Microsoft Authenticator, etc.)
What data is sent and when: 
– No external data transmission – TOTP codes are generated locally using the TOTP algorithm 
– Secret key generation – A unique secret key is generated locally when 2FA is enabled for a user 
– QR code generation – QR codes are generated locally for easy setup with authenticator apps 
– Code verification – Generated codes are verified locally against the stored secret key
Privacy and Terms: 
– <a href="https://tools.ietf.org/html/rfc6238" rel="nofollow ugc">RFC 6238 – TOTP Standard</a> 
– <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Authenticator Privacy Policy</a> (if using Google Authenticator app) 
– <a href="https://authy.com/privacy/" rel="nofollow ugc">Authy Privacy Policy</a> (if using Authy app) 
– <a href="https://privacy.microsoft.com/en-us/privacystatement" rel="nofollow ugc">Microsoft Authenticator Privacy Policy</a> (if using Microsoft Authenticator app)
<h3>Data Handling Summary</h3>
When CAPTCHA is disabled: No data is sent to any third-party services.
When CAPTCHA is enabled: Only the specific provider you choose receives verification data. Data is not shared between providers or stored by Guard Dog beyond the verification process.
When 2FA is disabled: No external data transmission occurs.
When 2FA is enabled: 
– All TOTP operations (code generation, verification) happen locally on your server 
– No data is transmitted to external services for 2FA functionality 
– Authenticator apps only receive the initial setup QR code or secret key 
– Recovery codes are generated locally and stored securely
User control: Users can choose which CAPTCHA provider to use, or disable CAPTCHA entirely. 2FA can be enabled/disabled per user, and users can choose their preferred authenticator app. All security features are optional and configurable.

Guard Dog

Comprehensive WordPress security plugin with custom login URLs, two-factor authentication, CAPTCHA protection, event and activity logging, as well as  …

Imran Sayed

Smit Patadiya

It lets your user login on to your website simply with their mobile number. No more password or email required.
<h3>Features</h3>
<ol>
<li>Passwordless login with SMS/OTP</li>
<li>Compatible with All Themes and Plugins</li>
<li>Fast and Secure</li>
<li>Uses React : Lightening fast experience for users.</li>
<li>Responsive : Works seamlessly for all devices</li>
<li>Translation Ready: Compatible with WPML and RTL</li>
<li>Non Developer Friendly</li>
<li>Free Updates</li>
<li>Free Single International Country: Use it in your country.</li>
</ol>
<a href="https://orionhive.com/sms-login-static/screenshot-4.png" rel="nofollow ugc">Features</a>
<h3>SMS Gateways Supported</h3>
It supports 6 SMS Gateways
<ol>
<li><a href="https://youtu.be/kepFz_P05rM" rel="nofollow ugc">Twilio</a></li>
<li><a href="https://youtu.be/7pCO9TMOVUI" rel="nofollow ugc">Nexmo</a></li>
<li><a href="https://youtu.be/Gml5LR-437c" rel="nofollow ugc">ClickSend</a></li>
<li><a href="https://youtu.be/e-moO1AYg8Q" rel="nofollow ugc">MSG91</a></li>
<li><a href="https://youtu.be/cu2HjXy3ap4" rel="nofollow ugc">Clickatell</a></li>
<li><a href="https://youtu.be/w9Rbu6rhIho" rel="nofollow ugc">RingCaptcha</a></li>
</ol>
<h3>Demo Video</h3>
Please check the demo videos
[2019-06-23] Plugin Demo.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/_iiigGOzwmQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Plugin Features & Tutorials Video</h3>
[2019-06-30] Features:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/cu2HjXy3ap4?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
[2019-06-30] Nexmo API Tutorial:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/7pCO9TMOVUI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
[2019-06-30] Twilio API Tutorial:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/kepFz_P05rM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
[2019-06-30] ClickSend API Tutorial:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Gml5LR-437c?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
[2019-06-30] MSG91 API Tutorial:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/e-moO1AYg8Q?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
[2019-06-30] RingCaptcha API Tutorial:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/w9Rbu6rhIho?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Chat Support</h3>
<a href="https://www.messenger.com/t/OrionPlugins" rel="nofollow ugc">Chat Support</a>
<h3>Installation and Use</h3>
This section describes how to install the plugin and get it working.
<ol>
<li>Upload the plugin files to the <code>/wp-content/plugins/plugin-name</code> directory, or install the plugin through the WordPress plugins screen directly.</li>
<li>Activate the plugin through the ‘Plugins’ screen in WordPress</li>
<li>Go to WordPress admin Dashboard under ‘Orion Login Settings’ Menu and fill the required fields.</li>
<li>Get the required API key, Secret and Sender IDs etc from one of the above mentioned SMS service providers ( as per the instructions shown in the settings page )</li>
<li>Fill the required fields as described in the plugin’s settings page.</li>
<li>Put the form selector class name or id on the plugin settings page and the plugin will automatically create a ‘Login with SMS’ button in your login form.</li>
<li>When the user clicks on the ‘Login with SMS’ button a new form will pop up, where user can enter the his phone number that he gave at the time of registration.</li>
<li>User can receive the verification code on the registered mobile number. If he verifies the code correctly then he will be logged in and directed to home page.</li>
<li>Plugin loads font-awesome( open source, gpl friendly ) from cdn for admin dashboard settings. However when offline everything should work as expected, except the icons would show when you are back online.</li>
</ol>

Orion Login with SMS

This plugin allows you to Login with OTP/SMS Verification Code with supported forms.

Guard Dog vs Orion Login with SMS