johanee

Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Features
<ul>
<li>Limit the number of retry attempts when logging in (for each IP). Fully customizable</li>
<li>Limit the number of attempts to log in using auth cookies in same way</li>
<li>Informs user about remaining retries or lockout time on login page</li>
<li>Optional logging, optional email notification</li>
<li>Handles server behind reverse proxy</li>
<li>It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂</li>
</ul>
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.

Limit Login Attempts

bad role

We had initial issues and tried again and it is working better.

Getting a lot better.


I absolutely hate bloated plugins, so I love this one. It's simple and works as expected. Guess it's wise to use a plugin such as this one, against brute force attacks.



Guido


Love this plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

SPIRAL Inc.

“SPIRALセキュアセッションマネージャー”は スパイラル株式会社 が提供するクラウド型ローコード開発プラットフォームSPIRALを利用し、安全な会員サイトを制作できるプラグインです。プログラム開発は一切不要。どなたでも簡単に会員サイトを作成することができます。 
プラグインの特長 
　・ログインフォームをウィジェットとして表示 
　・会員データは高セキュリティなSPIRALのデータベースにて安全に保管されます。 
　・SPIRALの会員データへの認証とセッション管理が自動で行えます。 
　・会員サイトを実現する複数のショートコードを提供 
　ショートコードを利用してWebコンテンツページをログインにより表示内容の切り分けができます。 
　また、会員属性によってもコンテンツ内容の表示の切り分けが可能です。 
　さらに、SPIRALのデータベースに保管されているデータをコンテンツページへ表示も可能です。 
プラグインの設定方法やショートコード情報などは<a href="https://apl-support.pi-pe.co.jp/s3m/" rel="nofollow ugc">サポートサイト</a>を参照してください。 
※SPIRALは スパイラル株式会社 の登録商標です。
このプラグインは会員管理機能を提供するために第三者（外部）サービスを利用しています。 
プラグインを利用するには、<a href="https://www.spiral-platform.co.jp/service/spiralv1/" rel="nofollow ugc">SPIRAL ver.1</a> または <a href="https://spiral.pi-pe.co.jp/" rel="nofollow ugc">SPIRAL ver.2</a>の契約が別途必要です。
“SPIRALセキュアセッションマネージャー” is a plugin that utilizes the cloud-based low-code development platform SPIRAL provided by SPIRAL Inc. , enabling the creation of secure membership sites. No programming is required, and anyone can easily create a membership site. 
Plugin Features: 
– Display the login form as a widget. 
– Member data is securely stored in SPIRAL’s high-security database. 
– Authentication to SPIRAL’s member data and session management are automatically handled. 
– Provides multiple shortcodes to create a membership site. 
– Use shortcodes to differentiate the display content of web content pages based on login status. 
– Additionally, content display differentiation based on member attributes is possible. 
– Furthermore, display data stored in SPIRAL’s database on content pages. 
For information on plugin settings and shortcodes, please refer to the <a href="https://apl-support.pi-pe.co.jp/s3m/" rel="nofollow ugc">support site</a>. 
*SPIRAL is a registered trademark of SPIRAL Inc. .
This plugin utilizes third-party (external) services to provide membership management functionality. 
To use the plugin, a separate contract with <a href="https://www.spiral-platform.co.jp/service/spiralv1/" rel="nofollow ugc">SPIRAL ver.1</a> or <a href="https://spiral.pi-pe.co.jp/" rel="nofollow ugc">SPIRAL ver.2</a> is required.
<h3>Service Provider: SPIRAL Platform</h3>
<ul>
<li>Service URL: <a href="https://www.spiral-platform.co.jp/service/spiralv1/" rel="nofollow ugc">SPIRAL ver.1</a></li>
<li>
Terms of Use: <a href="https://www.spiral-platform.co.jp/wp-content/uploads/user/spiral/SPIRALv1_agreement.pdf" rel="nofollow ugc">SPIRAL ver.1 Terms of Use</a>
</li>
<li>
Service URL: <a href="https://spiral.pi-pe.co.jp/" rel="nofollow ugc">SPIRAL ver.2</a>
</li>
<li>Terms of Use: <a href="https://www.pi-pe.co.jp/area/table_file/B1-K8B000270010O9k0E0E24000002000hj5" rel="nofollow ugc">SPIRAL ver.2 Terms of Use</a></li>
</ul>
<h4>Usage Details</h4>
This plugin uses the SPIRAL API to enhance its features. The API requests are made to the following endpoints:
<ol>
<li>API Endpoint:
<ul>
<li>Endpoint URL: <code>https://api.spiral-platform.com/v1</code></li>
</ul>
</li>
<li>Authentication Server API Endpoints:
<ul>
<li>Login/Cache API: https://s3m-api.smp.ne.jp/api/v1/</li>
<li>authentications: https://s3m-api.smp.ne.jp/api/v1/authentications/</li>
<li>API Location Retrieval: https://s3m-locator.smp.ne.jp/api/v1/locator/ , https://www.pi-pe.co.jp/api/locator</li>
<li>Activation: https://s3m-account.smp.ne.jp/api/v1/</li>
</ul>
</li>
</ol>
You can review the service URLs and terms of use related to these services at the following links: 
– Service URL: <a href="https://www.spiral-platform.co.jp/service/spiralv1/" rel="nofollow ugc">SPIRAL ver.1</a> 
– Terms of Use: <a href="https://www.spiral-platform.co.jp/wp-content/uploads/user/spiral/SPIRALv1_agreement.pdf" rel="nofollow ugc">SPIRAL ver.1 Terms of Use</a>
<ul>
<li>Service URL: <a href="https://spiral.pi-pe.co.jp/" rel="nofollow ugc">SPIRAL ver.2</a></li>
<li>Terms of Use: <a href="https://www.pi-pe.co.jp/area/table_file/B1-K8B000270010O9k0E0E24000002000hj5" rel="nofollow ugc">SPIRAL ver.2 Terms of Use</a></li>
</ul>
Please note that by using this plugin, you acknowledge and agree to the terms of use and privacy policy of SPIRAL. 
Make sure to review them to ensure compliance and understanding of how your data is handled.
<h3>Privacy Policy</h3>
SPIRALセキュアセッションマネージャー is designed as part of the creation and functionality of membership websites. 
You can connect your membership website created with this plugin to the low-code development platform SPIRAL and sets the websites to send data to the database in SPIRAL accounts and also can decide which accounts the data is sent to. 
the data is managed by who managed the accounts. SPIRAL Inc. processes without anyone seeing or touching the data. 
If you have any questions regarding privacy, please feel free to <a href="https://www.pi-pe.co.jp/regist/is?SMPFORM=man-mcsepb-0e06c81b1a06832e44b64b391bc18b71&f000099823=WordPress%E3%83%97%E3%83%A9%E3%82%B0%E3%82%A4%E3%83%B3%20%E4%BC%9A%E5%93%A1%E7%AE%A1%E7%90%86&f000099824=https://www.pi-pe.co.jp/solution/wp-mls/" rel="nofollow ugc">contact us</a>.
This plugin utilizes third-party (external) services to provide membership management functionality. 
To use the plugin, a separate contract with <a href="https://www.spiral-platform.co.jp/service/spiralv1/" rel="nofollow ugc">SPIRAL ver.1</a> or <a href="https://spiral.pi-pe.co.jp/" rel="nofollow ugc">SPIRAL ver.2</a> is required. 
You can review the service URLs and terms of use related to these services at the following links: 
– Service URL: <a href="https://www.spiral-platform.co.jp/service/spiralv1/" rel="nofollow ugc">SPIRAL ver.1</a> 
– Terms of Use: <a href="https://www.spiral-platform.co.jp/wp-content/uploads/user/spiral/SPIRALv1_agreement.pdf" rel="nofollow ugc">SPIRAL ver.1 Terms of Use</a>
<ul>
<li>Service URL: <a href="https://spiral.pi-pe.co.jp/" rel="nofollow ugc">SPIRAL ver.2</a></li>
<li>Terms of Use: <a href="https://www.pi-pe.co.jp/area/table_file/B1-K8B000270010O9k0E0E24000002000hj5" rel="nofollow ugc">SPIRAL ver.2 Terms of Use</a></li>
</ul>

SPIRALセキュアセッションマネージャー

Easily add secure membership management and authentication features to your WordPress site using SPIRAL®.

Limit Login Attempts vs SPIRALセキュアセッションマネージャー