Matt Miller

mikemm01

Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/ip-blacklist-cloudflare/" rel="ugc">leaving a 5-star review</a>.
Cloudflare provides security and optimization services for websites all around the internet. WordPress sites are often attacked by bots or hackers and, while Cloudflare has preset firewall rules to help, it doesn’t always filter out all malicious activity.
Cloudflare IP Blacklist allows WordPress admins to add a list of prohibited usernames and if someone attempts to log in with one of these usernames, this users IP address is automatically added to the Cloudflare blacklist. By doing this, the next time this user attempts to load the site, they will be blocked by Cloudflare before their requests get to your site’s server. Add an extra layer of security today to your site!
** This plugin relies on the use of Cloudflare, a third-party service that increases security and performance for web sites and services across the internet. For more information, visit the <a href="https://www.cloudflare.com/" rel="nofollow ugc">Cloudflare website</a> and their <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">privacy policy</a>. This plugin is not officially endorsed, built or maintained by the Cloudflare team; rather, we are a development company that uses their services every day! **
<h3>Request</h3>
If you find that a part of this plugin isn’t working, please don’t simply click the WordPress “It’s broken” button. Let us know what’s broken in <a href="https://wordpress.org/support/plugin/ip-blacklist-cloudflare/" rel="ugc">its support forum</a> so we can make it better.

IP Blacklist for Cloudflare

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

harrym

WordPress uses phpass to store passwords. Because WordPress has to work everywere, it uses the portable version of phpass, 
which uses MD5 to hash passwords. MD5 is not a very good hashing algorithm for passwords, because it’s relatively fast.
This plugin switches over to bcrypt, which is the algorithm recommended by phpass, and is a much better option for password 
storage because it is much slower to produce. This makes it much harder for an attacker who’s managed to access your hashed 
passwords to obtain plain text passwords by brute-forcing, or by trying passwords from a dictionary.
Note: this plugin requires PHP 5.3.0 or newer
Be aware that if you use this plugin and then move to a host that does not support bcrypt, you will need to reset any user 
account that you want to log in with.

wp-bcrypt

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

IP Blacklist for Cloudflare vs wp-bcrypt