laceous

Due to lack of interest (both my own and based on the number of downloads) this plugin will not be updated for WP 3.0
WordPress’ auth cookies include a built-in expiration date (either 2 or 14 days depending on if the ‘Remember Me’ option is checked). Even if you remove the client-side cookie (by manually logging out or just closing your browser if ‘Remember Me’ wasn’t checked when logging in) the data that was stored within the cookie is still valid until the expiration date is reached.
This could be an issue if someone managed to “steal” your cookie(s). They would still be able to access your website for some time into the future.
This plugin will immediately invalidate your auth cookies when you manually log out. This, of course, also means that you have to manually click ‘Log out’ for this plugin to work properly (you can’t just close your browser to remove any cookies that expire at the end of the session). This won’t prevent session hijacking, but should limit the amount of time that an attacker can access your website.

Invalidate Logged Out Cookies

This plugin will immediately invalidate your auth cookies when you manually log out.

Julio Potier

Grégory Viguier

SecuPress

superment

<h4>Move Your Login Page</h4>
Tired of bots finding your WordPress login page? SP Move Login allows you to change your login URL to protect it from automated attacks and brute force attempts.
This plugin contains the Move Login module from <a href="https://secupress.me/" rel="nofollow ugc">SecuPress</a>, a comprehensive WordPress security plugin. While this plugin focuses solely on moving your login page, the full SecuPress version includes many other security features such as:
Why move your login page?
By default, WordPress login pages are located at <code>/wp-login.php</code> and <code>/wp-admin/</code>, making them easy targets for bots and attackers. SP Move Login allows you to:
<ul>
<li>Change your login URL to a custom slug</li>
<li>Protect your registration page (if enabled)</li>
<li>Block access to the default login pages</li>
<li>Display custom error messages or redirect to a custom page when someone tries to access the old login URL</li>
</ul>
Features:
<ul>
<li>Simple and easy to use</li>
<li>Change your login URL with just a few clicks</li>
<li>Works with pretty permalinks</li>
<li>Compatible with multisite installations (includes Single Sign-On support)</li>
<li>Custom error messages for blocked access</li>
<li>Redirect to custom page option</li>
<li>Lightweight – focused solely on moving your login page</li>
</ul>
Note: This plugin requires pretty permalinks to be enabled. You can activate them in Settings > Permalinks.
For more advanced security features, check out the <a href="https://secupress.me/" rel="nofollow ugc">full SecuPress version</a>.

SP Move Login

Don't know why I didn't find "Move Login" first. I already tested 2 alternative free plugins and it was deficient in different ways.  "Move Login" is powerful, light and easy to set up. Very nice find. Thanks.

The best of the 3 ones I tested

Move your WordPress login page to protect it from bots. This plugin contains the Move Login module from SecuPress. Other security modules are availabl …

Invalidate Logged Out Cookies vs SP Move Login