johanee

<p>Limit the number of login attempts possible both through normal login as well as using auth cookies.</p>
<p>By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.</p>
<p>Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.</p>
<p>Features</p>
<ul>
<li>Limit the number of retry attempts when logging in (for each IP). Fully customizable</li>
<li>Limit the number of attempts to log in using auth cookies in same way</li>
<li>Informs user about remaining retries or lockout time on login page</li>
<li>Optional logging, optional email notification</li>
<li>Handles server behind reverse proxy</li>
<li>It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂</li>
</ul>
<p>Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish</p>
<p>Plugin uses standard actions and filters only.</p>


Limit Login Attempts

bad role

We had initial issues and tried again and it is working better.

Getting a lot better.


I absolutely hate bloated plugins, so I love this one. It's simple and works as expected. Guess it's wise to use a plugin such as this one, against brute force attacks.



Guido


Love this plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

wp-buy

osama.esh

mohmmed alagha

<p>Limit the number of login attempts possible both through normal login as well as using auth cookies.</p>
<p>By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.</p>
<p>Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.</p>
<h3>Basic Features</h3>
<ul>
<li>Limit the number of retry attempts when logging in.</li>
<li>Configurable lockout timings.</li>
<li>Email notification of blocked attempts (Detailed email containing all necessary information).</li>
<li>Notify the user of remaining attempts.</li>
<li>Report containing all blocked attempts.</li>
<li>Whitelist/Blocklist of IPs (Support IP ranges).</li>
<li>Allow/Block Countries.</li>
<li>Automatically block IP addresses that exceed limit login attempts</li>
<li>Automatically add IP addresses that exceed blocks limit to the deny list</li>
<li>Send notifications about blocked retry (Email sent to admins)</li>
<li>Inform the user about the remaining retries or lockout time on the login page.</li>
<li>Unlock The Locked users – Easily unlock the locked admin through the email or dashboard.</li>
<li>Limit the number of retry attempts when logging in per IP.</li>
<li>Limit the number of attempts to log in using cookies.</li>
<li>Optional logging and optional email notification.</li>
<li>Compatible with Google captcha, Captcha Plus & reCaptcha.</li>
<li>Dashboard gives you an overview of your site’s security.</li>
<li>Enable or disable the plugin functionality</li>
<li>Enable to disable email notifications</li>
<li>Compatible with latest WordPress version</li>
<li>Woocommerce login page protection.</li>
<li>Wordfence & Sucuri compatibility.</li>
<li>GDPR compliant.</li>
</ul>
<h3>Advanced Features (PRO)</h3>
<ul>
<li>All Basic features included.</li>
<li>Save the password that was used by the hacker (Save part of the password and hide the last three digits).</li>
<li>Advanced dashboard gives you an overview of your site’s security (Charts for the most important reports).</li>
<li>Block attackers by IP, Country, IP range.</li>
<li>Mobile Application for the admins to follow up the site security (<a href="https://www.wp-buy.com/wp-content/uploads/apps/login-attempts-app.apk" rel="nofollow ugc">Download APK</a>).</li>
</ul>
<h3>Video Description</h3>
<div class="embed-vimeo" style="text-align: center;"><iframe loading="lazy" src="https://player.vimeo.com/video/585819426" width="750" height="422" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe></div>
<h3>Plugin Settings and Reports</h3>
<div class="embed-vimeo" style="text-align: center;"><iframe loading="lazy" src="https://player.vimeo.com/video/585820422" width="750" height="422" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe></div>


Limit Login Attempts vs Limit Login Attempts (Spam Protection)