Holographic

Holographic Login Shield helps protect the WordPress login area from repeated failed logins, automated abuse and common account-discovery behaviour.
The plugin is designed to stay focused. It adds practical login hardening without replacing the WordPress admin area, adding unnecessary front-end assets or sending free-plugin security logs to an external service.
Free features include configurable failed-login lockouts, an automatic permanent IP block threshold, local allowed and blocked IP address lists, Cloudflare-aware visitor IP detection, a paginated recent activity log, CSV log export, log retention cleanup, generic login errors, XML-RPC control, Application Password control, optional author archive blocking, a hidden bot trap and optional throttled failed-login email alerts.
Allowed IP addresses can be added manually or with the Add My IP button. Blocked IP addresses can be added manually and are also populated automatically when the permanent blocking threshold is reached. Both lists remain local to your WordPress site.

Holographic Login Shield

Lightweight login protection, brute-force defence and safer admin access controls for WordPress.

Khushal Tank

Khushal Login Path Guard is a WordPress security plugin that allows you to change your default login URL and protect your site from common attack vectors. The plugin blocks brute-force attempts, prevents user enumeration, secures sensitive files, and hides WordPress information from potential attackers. All blocked paths display 404 errors (Stealth Mode) instead of redirects, making your site invisible to attackers.
<h4>Features</h4>
Login Protection: 
* Blocks 17+ common brute-force login paths 
* Custom login URL (only you know the path) 
* Shows 404 error instead of redirect (no hints to attackers) 
* Protects /wp-admin, /login, /wp-login.php and more
Advanced Security: 
* Blocks XML-RPC (prevents brute-force via API) 
* Prevents user enumeration via REST API 
* Blocks author page enumeration (?author=1) 
* Protects wp-config.php and sensitive files 
* Blocks direct access to wp-includes PHP files 
* Removes WordPress version information
Security Headers: 
* X-Frame-Options (prevents clickjacking) 
* X-Content-Type-Options (prevents MIME sniffing) 
* X-XSS-Protection (XSS attack protection) 
* Referrer-Policy (privacy protection) 
* Permissions-Policy (feature restriction)
User-Friendly: 
* Easy settings interface 
* One-click URL copy 
* Normal functionality for logged-in users 
* Does not block AJAX requests 
* Clean admin interface
<h4>Security Benefits</h4>
<ol>
<li>Brute Force Protection – 15+ login paths blocked</li>
<li>XML-RPC Disabled – Prevents API-based attacks</li>
<li>User Enumeration Blocked – Hides usernames from attackers</li>
<li>Sensitive Files Protected – wp-config.php, .htaccess secured</li>
<li>Security Headers – Industry-standard HTTP headers</li>
<li>WordPress Hidden – Removes version and generator tags</li>
</ol>
<h4>इस्तेमाल करना बेहद आसान है</h4>
<ol>
<li>Plugin activate करें</li>
<li>Settings > Login Path Security में जाएं</li>
<li>अपना custom login path enter करें</li>
<li>Settings save करें</li>
<li>नया login URL use करें</li>
</ol>

Khushal Login Path Guard

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

Holographic Login Shield vs Khushal Login Path Guard