johanee

Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Features
<ul>
<li>Limit the number of retry attempts when logging in (for each IP). Fully customizable</li>
<li>Limit the number of attempts to log in using auth cookies in same way</li>
<li>Informs user about remaining retries or lockout time on login page</li>
<li>Optional logging, optional email notification</li>
<li>Handles server behind reverse proxy</li>
<li>It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂</li>
</ul>
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.

Limit Login Attempts

bad role

We had initial issues and tried again and it is working better.

Getting a lot better.


I absolutely hate bloated plugins, so I love this one. It's simple and works as expected. Guess it's wise to use a plugin such as this one, against brute force attacks.



Guido


Love this plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Rahi Saiful

wpmobo

<h4>Get many solutions for preventing security threats under one roof.</h4>
Admintosh – WordPress admin customization and security tools plugin is designed for empowering WordPress administrative operations with different experiences. You will get many essential features under one roof using this plugin.
<ul>
<li>
Customize WP Login Page: Customize default login page with the Admintosh Login Page Customize options. The plugin offers lots of customization possibilities like background color, background image, text color, link color, logo upload, form style etc. With no coding skill, you can create an outstanding login page in no time.
</li>
<li>
Customize Dashboard: Customize the Dashboard and make it like your own brand all customization possibilities are here like background color, menu color, text color, link color, logo upload, etc.
</li>
<li>
Captcha: Add captch into login, registration, lost password, comments Form etc. It also supported WooCommerce & EDD. The plugin offer 3 types of Captcha Google reCaptcha ( Version 2 ), Random number Captcha and Math Captcha so you could use any one of them’s to protection from remote digital entry by making sure only a human being with the right password can access the account.
</li>
<li>
Limit Login Attempts: After a preset number of attempts has been exceeded, this feature automatically stops any more attempts from a specific Internet Protocol (IP) address and/or username. This considerably reduces the potency of brute force attacks on your website.
</li>
<li>
Hide Login: To change your login URL to whatever you want. This feature allows you to easily and securely change the URL of the login form page to anything you desire. It does not actually rename or change core files, nor does it add rewrite rules. Instead, it intercepts page requests and works on any WordPress website. The wp-admin directory and wp-login.php page become inaccessible so your website becomes more secure.
</li>
<li>
Login History: Monitor your website’s users with detailed login information, including Last login date and time, Environment/server IP address Country, city, continent, timezone Latitude and longitude Browser details And much more.
</li>
<li>
Admin Activity Logs: The Activity Log functions like an airplane’s black box, recording every action in the WordPress admin. It provides a detailed history of user activities, allowing you to monitor exactly what’s happening on your website with full transparency. Track changes, user actions, and plugin/theme modifications.
</li>
<li>
Country Restriction: This feature allows you to easily set up rules to block one or more countries from accessing Entire Site, only login page or only front-end. It allows users to block unwanted traffic from accessing the frontend or backend based on country or proxy server detection. It helps reduce spam, unwanted sign-ups, and enhances overall security. This plugin uses the free IP Geolocation API which offers more than 1 billion requests per day absolutely free.
</li>
<li>
More coming soon…
</li>
</ul>
<a href="https://wpmobo.com/admintosh-wordpress-admin-customization-and-security-plugin/" rel="nofollow ugc">👁️ Visit</a> | <a href="https://wpmobo.com/documentation/docs/admintosh/" rel="nofollow ugc">🔗 Documentation</a> 
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/mkDHvADBuSY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>WordPress Authentication Plugin</h3>
Secure and customize your WordPress site with Admintosh. This all-in-one plugin enhances authentication by adding login customizations, CAPTCHA options, and limiting login attempts. Features like country restrictions, hidden login URLs, and detailed login history provide advanced security tools to protect your WordPress admin and prevent unauthorized access.
<h3>Brute Force Protection Plugin</h3>
Protect your WordPress site from brute force attacks with Admintosh. This powerful plugin limits login attempts, blocks suspicious IPs, and adds CAPTCHA options for enhanced security. Features like hidden login URLs and login monitoring ensure robust protection, safeguarding your site from unauthorized access and keeping it secure against threats.
<h3>WordPress Security Plugin</h3>
Fortify your WordPress site with Admintosh, the ultimate security plugin. It offers advanced features like CAPTCHA protection, login attempt limits, hidden login URLs, and country-based access restrictions. With login history monitoring and dashboard customization, Admintosh ensures robust security and empowers you to safeguard your site from threats effectively.
<h3>Activity Log</h3>
Track all activity on your WordPress site with detailed user and event logs, giving you clear insights into every action happening in real time.
✅ Unauthorized Access Attempts – Detect potential hacking attempts.
✅ Content Changes – Track when a post is published and by whom.
✅ Plugin & Theme Modifications – See when a plugin/theme is activated or deactivated.
✅ Suspicious Admin Activity – Identify unusual actions for enhanced security.
Stay informed and keep your website secure! 🚀
<h4>Free Version Features</h4>
<ol>
<li> Modular Based (Everything Available On Demand)</li>
<li> Customize login page style</li>
<li> Customize admin panel style</li>
<li> Customize admin menu style</li>
<li> Customize admin bar style</li>
<li> ## 3 types of Captcha ##</li>
<li> Google reCaptcha ( Version 2 )</li>
<li> Math Captcha</li>
<li> Random number Captcha</li>
<li> Login form reCaptcha</li>
<li> ## Limit Login Attempts ##</li>
<li> Configurable Lockout Timings</li>
<li> Remaining Tries</li>
<li> ## Hide Login ##</li>
<li> Block default wp-login.php</li>
<li> Block default wp-admin</li>
<li> Use custom login slug instead of wp-admin</li>
<li> ## Login History ##</li>
<li> Login Date-Time</li>
<li> Username</li>
<li> User Role</li>
<li> IP Address</li>
<li>## Admin Activity Logs ##</li>
<li>Username</li>
<li>Action</li>
<li>Object/ID</li>
<li>Message</li>
<li>Time</li>
<li>IP Address</li>
<li> ## Country Restriction ##</li>
<li> Entire Site Country Restriction</li>
<li> Front-End Country Restriction</li>
<li> wp-login page Country Restriction</li>
<li> Block Template Content Edit Option</li>
<li> ## General Options ##</li>
<li> Hide WordPress Version</li>
<li> Disable File Editing</li>
<li> Disable XML-RPC</li>
<li> Disable Right Click</li>
<li> Disable Content Copy</li>
<li> Disable Login Hints Error Messages</li>
<li> Easy settings options</li>
<li> Translation ready</li>
<li> Easy to use it in both Free and Premium WordPress Themes</li>
<li> Unlimited update</li>
</ol>
<h4>Compatibility With</h4>
<ul>
<li>Sucuri compatibility.</li>
<li>Wordfence compatibility.</li>
<li>Ultimate Member compatibility.</li>
<li>WPS Hide Login compatibility.</li>
<li>XMLRPC gateway protection.</li>
<li>Woocommerce login page protection.</li>
<li>Multi-site compatibility with extra MU settings.</li>
<li>GDPR compliant.</li>
<li>Custom IP origins support (Cloudflare, Sucuri, etc.).</li>
<li>llar_admin own capability.</li>
</ul>
How to use:- 
very easy to use,after active plugin just go to Dashboard -> Admintosh Settings . You will find all settings to use.
<h3>WHAT’S NEXT</h3>
Have a look at the other awesome plugins for WordPress
<a href="https://wpmobo.com/popx-pupup-builder/" rel="nofollow ugc">✳️ PopX – Popup Builder</a> – WordPress Gutenberg Popup Builder Plugin
<a href="https://wpmobo.com/storenotifier-notifications-plugin-for-woocommerce/" rel="nofollow ugc">✳️ Store Notifier</a> – WhatsApp & On-Site Notifications plugin for WooCommerce
Unlock new possibilities with WPMOBO plugins—push your limits and achieve more today!
<h3>3rd Party Service Used</h3>
We used google reCAPTCHA v2 API service from google. All relevant link below.
https://www.google.com/recaptcha/about/
https://www.google.com/recaptcha/api/siteverify
https://www.google.com/recaptcha/api.js
<h3>Privacy Policy</h3>
Admintosh uses <a href="https://appsero.com" rel="nofollow ugc">Appsero</a> SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements.
Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users.
Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case.
Learn more about how <a href="https://appsero.com/privacy-policy/" rel="nofollow ugc">Appsero collects and uses this data</a>.

Admintosh – WordPress admin customization and security tools


Very simple and useful plugin. Everything working wonderful. I like the simplicity!


Useful plugin

login attempts, Firewall, reCAPTCHA, country restriction, Login History, change wp-login.php to anything make sure your site security.

Limit Login Attempts vs Admintosh – WordPress admin customization and security tools