gabrielrosca

Login Security with Telegram Alerts is your comprehensive solution for fortifying WordPress login security and staying informed about critical site activities. It actively combats brute-force attacks, enhances user authentication with multi-factor options, and provides real-time alerts directly to your Telegram. Scalable for any site size, from personal blogs to large enterprises, it ensures your WordPress site remains secure and you’re always in the loop.
Key Features: 
Login Security with Telegram Alerts is packed with powerful features designed to give you peace of mind and full control over your site’s access.
Brute-Force Protection: Automatically blocks suspicious IP addresses after a configurable number of failed login attempts, effectively preventing dictionary attacks and credential stuffing.
Real-time Telegram Notifications: Receive instant alerts for failed login attempts and successful logins, delivered directly to your chosen Telegram channel, group, or private chat. This provides immediate awareness of critical site events, enabling prompt action.
Comprehensive Activity Logging: Maintains detailed records of both failed and successful login events, capturing critical information such as IP addresses, usernames, login times, and user agents. This log is invaluable for auditing and identifying suspicious patterns.
IP Management: Block or unblock IP addresses directly from the Activity Log with one-click actions. Administrators can manually manage IP blacklists and whitelists from the plugin’s settings page. 
WordPress Core Files Integrity Check: Verify that WordPress core files haven’t been tampered with by comparing them against official checksums from WordPress.org.
File Permissions Management: Automatically check and fix file permissions to match WordPress security standards, ensuring your installation follows best practices. 
Custom Admin URL: Hide your wp-admin login URL by creating a custom access point, adding an extra layer of security by obscurity.
Geolocation Integration: Includes location data in Telegram notifications, adding crucial context to security alerts and aiding in the investigation of suspicious activities. 
User-Friendly Admin Interface: An intuitive, tabbed settings page contributes to a clean and easy-to-use experience. 
Why Choose Login Security with Telegram Alerts?
Comprehensive Security: Provides advanced features that actively defend your site against common and persistent threats. 
Instant Awareness: Critical updates are delivered directly to Telegram, facilitating immediate action and providing peace of mind to site administrators. 
User-Friendly: Engineered for quick setup, often achievable in minutes, with an intuitive interface that makes configuration accessible to users of all technical levels. 
Performance Optimized: Built with efficiency in mind, ensuring that robust security measures do not compromise site speed. 
Dedicated Support: A passionate team is committed to providing prompt and helpful support, aiming to ensure users maximize the plugin’s potential. 
Compatibility & Requirements:
WordPress Version: 5.0 or higher (Tested up to 6.9) 
PHP Version: 7.2 or higher (PHP 7.4+ recommended for optimal performance and security) 
Performance Considerations: 
Login Security with Telegram Alerts is designed with performance in mind:
Efficient API Calls: When interacting with external services like Telegram’s API, the plugin uses WordPress’s built-in HTTP API for reliable and performant requests, minimizing impact on page load times. 
Optimized Database Interactions: Designed to minimize database queries and employs best practices for data storage and retrieval, ensuring your site’s database remains lean and responsive. 
Lightweight Codebase: Development emphasizes avoiding bloated scripts and unnecessary assets, ensuring the plugin adds minimal overhead to site resources. 
Security Best Practices: 
Beyond merely claiming to be “secure,” Login Security with Telegram Alerts implements rigorous security measures:
Nonces: All critical actions and forms within the plugin utilize WordPress Nonces to protect against Cross-Site Request Forgery (CSRF) attacks. 
Input Sanitization: All user input is rigorously sanitized before processing or storage to prevent malicious code injection, such as Cross-Site Scripting (XSS) attacks. 
Output Escaping: Data displayed on both the frontend and backend is properly escaped to prevent XSS vulnerabilities. 
Capability Checks: Access to plugin functionalities is strictly controlled by checking user capabilities using current_user_can(), preventing unauthorized users from performing actions they are not permitted to. 
Regular Audits: The plugin’s codebase undergoes regular scanning and updates to address emerging security vulnerabilities. 
Internationalization (i18n): 
Login Security with Telegram Alerts is fully internationalized, allowing for seamless translation into any language. All strings are meticulously wrapped in gettext functions, and a dedicated text domain (login-security-with-telegram-alerts) ensures compatibility with WordPress’s robust translation system.
<h3>Third-Party Services</h3>
This plugin may connect to external services to provide certain features:
Telegram API (api.telegram.org) 
– Used for: Sending security notifications to your configured Telegram bot 
– Triggered when: You enable Telegram notifications and configure a bot token and chat ID 
– Privacy Policy: https://telegram.org/privacy 
– Terms: https://telegram.org/tos
IP Geolocation (ip-api.com) 
– Used for: Looking up geographical location of login attempts 
– Triggered when: Geolocation is enabled in settings (optional feature) 
– Privacy Policy: https://ip-api.com/docs/legal 
– Data sent: IP addresses only
All external service connections are optional and only occur when explicitly enabled by the administrator. No data is sent without your configuration and consent.

Login Security with Telegram Alerts

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

Activity Log Pro

dmac

<blockquote>
“This is a super slick plugin guys. Very simple to use, very clean interface. Super excited about it.” – <a href="https://x.com/PineDigitalCo/status/1965138634732196243" rel="nofollow ugc">Ryan @ InfluenceWP.com</a>
“Perfect! Robust and exemplary neat plugin! All the info that you need is in a clear overview.” – <a href="https://wordpress.org/support/topic/perfect-10814/" rel="ugc">@mixha</a>
</blockquote>
Activity Log Pro gives you a complete audit trail of everything happening on your WordPress site. See who logged in, what content changed, exactly when it happened, which plugins were updated and any suspicious activity – all in one place.
Perfect for businesses, e-commerce stores, agencies, and multi-user sites that need visibility into who did what, when, and where. Whether you’re troubleshooting issues, staying compliant, or monitoring for security threats, Activity Log Pro makes it easy to keep your site secure and transparent.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/lXFKMhagrrY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Why Use an Activity Log in WordPress?</h3>
Understand every action on your site, reduce security risks, and simplify compliance.
Security & Compliance: Stay compliant with GDPR, HIPAA, and other regulations while detecting failed logins, role changes, and suspicious behavior.
Troubleshooting & Debugging: See exactly what changed before something broke – track plugin updates, theme edits, and content changes.
User Accountability & Audit Trails: Know exactly who did what, when, and from which IP address for complete transparency and legal compliance.
Performance & Site Health: Monitor plugin installations, theme changes and modifications that impact your site’s speed and stability.
Enhanced Backup Strategy: Create detailed change logs that complement your backups – know exactly what to restore and when changes occurred.
WordPress Security Monitoring: Track failed logins, suspicious activities, user role changes, and potential security threats in real-time.
<h3>Key Features Our Users Love</h3>
<h3>🚀 Complete Core Activity Tracking</h3>
<ul>
<li>User login/logout activities with IP tracking</li>
<li>Failed login attempt monitoring for security</li>
<li>Post, page, and custom post type changes (create, update, delete)</li>
<li>Media library activities (upload, edit, delete)</li>
<li>Plugin installations, activations, deactivations, and updates</li>
<li>Theme switches, installations, and customizer changes</li>
<li>WordPress core updates</li>
<li>Widget modifications and placement changes</li>
<li>Menu creation, updates, and deletions</li>
<li>User registration, profile updates, and role changes</li>
<li>Comment activities (approved, spam, trash, delete)</li>
<li>Settings and options changes</li>
<li>Category and tag management</li>
</ul>
<h3>🔌 Advanced Plugin Integrations</h3>
<ul>
<li>WooCommerce Integration: Complete e-commerce activity monitoring – track order modifications, product changes, inventory updates, customer data edits, payment gateway settings, and coupon usage for full store audit trails (Premium)</li>
<li>Yoast SEO Integration: Monitor all SEO changes including meta descriptions, title tags, search engines follow links, Advanced Meta Robots, Breadcrumbs Title updates, focus keyword changes, and readability optimizations to maintain SEO integrity (Premium)</li>
</ul>
<h3>Free Professional Features</h3>
<ul>
<li>Real-time activity monitoring dashboard</li>
<li>Advanced filtering and search capabilities</li>
<li>Detailed activity metadata and context</li>
<li>IP address tracking for security analysis</li>
<li>User role-based activity permissions</li>
<li>Customizable data retention policies</li>
<li>Export capabilities (CSV, JSON, HTML and TXT formats)</li>
<li>Clean, responsive admin interface</li>
<li>Database optimization for performance</li>
</ul>
<h3>💎 Premium Features</h3>
Upgrade to Activity Log Pro Premium for advanced security and privacy controls:
<ul>
<li>Advanced IP Privacy Controls – GDPR-compliant IP anonymization and masking options</li>
<li>IP Location Mapping – Geographical insights for visitor analysis and security monitoring</li>
<li>Enhanced Security Features – Real-time logs and suspicious activity logs (via Live Monitor)</li>
<li>JSON Feed Export – SIEM integration with secure token-based access</li>
<li>WooCommerce Logger – Comprehensive e-commerce tracking (orders, products, customers)</li>
<li>Yoast SEO Logger – Complete SEO audit trails for meta data and schema changes</li>
<li>Priority Support – Direct access to expert support with faster response times</li>
</ul>
<a href="https://activitylog.pro/features/#compare" rel="nofollow ugc">👉 Compare Free vs Premium Features →</a> | <a href="https://demo.tastewp.com/ActivityLogPro" rel="nofollow ugc">👉 Try out the Demo →</a>
<h3>Enterprise-Grade Performance & Database Architecture</h3>
⚡ Optimized Data Storage 
Activity Log Pro utilizes a dedicated custom database table specifically engineered for high-performance activity logging. This intelligent architecture ensures your WordPress site maintains peak performance even with extensive logging enabled. Our custom table design eliminates the overhead associated with WordPress’s standard post and meta tables, delivering lightning-fast query responses and minimal server resource consumption.
✔️ Performance Features 
Optimized Logging – Our logging system captures activities with minimal performance impact through efficient database operations and intelligent caching. While logging occurs in real-time to ensure data integrity, the system is designed with optimized queries and caching strategies to minimize any potential impact on site performance.
<h3>Complete Uninstall & Database Hygiene</h3>
🧹 Professional Clean Removal 
The plugin includes a comprehensive uninstall option that completely removes all plugin data when you choose to uninstall. Our automated cleanup routine meticulously removes the custom activity log table, plugin options, scheduled tasks, and any associated metadata, leaving your WordPress database in its original pristine state.
🗂️ Database Integrity Protection 
We prioritize your database’s long-term health. The uninstall process includes verification steps to ensure complete data removal without affecting any other WordPress functionality. This commitment to database cleanliness means you can confidently test or temporarily use Activity Log Pro without worrying about leftover data cluttering your system.
<h3>🛡️ Security & Privacy</h3>
Activity Log Pro takes your privacy and security seriously:
<ul>
<li>IP Address Anonymization by Default – All IP addresses are automatically anonymized (e.g., 192.168.1.xxx) for privacy protection</li>
<li>WordPress Standard Security – Database security practices (prepared statements, input sanitization)</li>
<li>Configurable Data Retention – Meet your privacy requirements with customizable retention periods</li>
<li>Administrator-Only Access – All plugin features require administrator privileges for security</li>
</ul>
<h3>Third-Party Services</h3>
This plugin uses the following third-party services:
IP Geolocation Service (ipinfo.io) 
– Purpose: Provides geographical location data for IP addresses to enhance security monitoring 
– Data Sent: IP addresses are sent to ipinfo.io for location lookup when administrators manually request IP location information 
– When Used: Only when administrators manually request IP location information via the admin interface 
– Privacy Policy: https://ipinfo.io/privacy-policy 
– Terms of Service: https://ipinfo.io/terms-of-service 
– Data Storage: Location data is cached locally for 24 hours to minimize API calls 
– User Control: This feature is optional and only available to administrators who explicitly request IP location data
Payment Processing Service (LemonSqueezy) 
– Purpose: Handles secure payment processing, license validation, and subscription management for premium features 
– Data Sent: When users choose to purchase premium plans, payment information (credit card details, billing address), email address, and license details are processed by LemonSqueezy 
– When Used: Only when users voluntarily initiate premium plan purchases, license activation, or subscription management 
– Privacy Policy: https://www.lemonsqueezy.com/privacy 
– Terms of Service: https://www.lemonsqueezy.com/terms 
– Data Storage: Payment and license data is managed entirely by LemonSqueezy – no payment information is stored on your WordPress site 
– User Control: Users have complete control over whether to purchase premium features and can manage their subscriptions through LemonSqueezy’s customer portal
Newsletter Subscription Service (LemonSqueezy) 
– Purpose: Allows users to voluntarily subscribe to product updates and educational content newsletters 
– Data Sent: Name and email address only when users explicitly choose to subscribe to the newsletter 
– When Used: Only when users voluntarily fill out and submit the newsletter subscription form in the plugin settings 
– Privacy Policy: https://www.lemonsqueezy.com/privacy 
– Terms of Service: https://www.lemonsqueezy.com/terms 
– Data Storage: Newsletter subscription data is managed by LemonSqueezy – no subscription information is stored on your WordPress site 
– User Control: Users have complete control over newsletter subscription and can unsubscribe at any time via email links or LemonSqueezy’s customer portal
<h3>📊 Perfect For</h3>
<ul>
<li>Business Websites & Corporate Sites: Maintain GDPR compliance, PCI DSS standards, and audit trail requirements for regulatory inspections and security protocols.</li>
<li>WooCommerce & E-commerce Stores: Track order modifications, product changes, inventory adjustments, customer data access, and payment processing for fraud prevention and compliance.</li>
<li>Multi-user WordPress Sites: Monitor team member activities, role changes, content approvals, and administrative access for complete user accountability.</li>
<li>WordPress Development & Staging Sites: Track plugin installations, removal, theme modifications.</li>
<li>Digital Agencies & Web Development Companies: Provide detailed client reporting, transparent site maintenance logs, and professional audit documentation.</li>
<li>Membership Sites & Private Communities: Track member activities, subscription changes, content access, and community moderation actions.</li>
<li>Educational Institutions & Learning Management: Monitor student submissions, instructor activities, course content changes, and user enrollment modifications.</li>
<li>News & Publishing Websites: Monitor editorial workflows, content publication schedules, author activities, and SEO optimization changes.</li>
</ul>
<h3>🔧 Easy Setup & Configuration</h3>
Get started in minutes: 
1. Install and activate the plugin – it works out of the box with default settings 
2. Configure which activities to track (optional) 
3. Set your data retention preferences (optional) 
4. Start monitoring immediately 
(There are various other Settings for you to explore)
No complex setup required – Activity Log Pro works right away with sensible defaults while offering extensive customization options for advanced users.
<h3>💡 Use Cases</h3>
Troubleshooting: “What changed right before the site broke?” 
Security Monitoring: “Who attempted to login with admin credentials?” 
Content Management: “When was this post last modified and by whom?” 
Compliance: “Show me all user activities for the past 6 months” 
Performance: “What plugins were recently activated that might be slowing the site?”
<h3>System Requirements</h3>
<ul>
<li>WordPress 6.3 or higher</li>
<li>PHP 7.4 or higher</li>
<li>MySQL 5.6 or higher (or MariaDB 10.0+)</li>
<li>Minimum 64MB PHP memory limit (128MB recommended)</li>
</ul>
<h3>Database Information</h3>
<ul>
<li>Creates custom table: <code>{prefix}actlogpro_activity_log_pro_all_logs</code></li>
<li>Estimated storage: ~1KB per logged event</li>
<li>Automatic cleanup: Based on retention settings (7-365 days)</li>
<li>Uses WordPress database prefix: Follows WordPress naming conventions</li>
</ul>
<h3>Known Limitations</h3>
<ul>
<li>Multisite networks: Each site maintains separate logs (no network-wide centralized logging)</li>
<li>Administrator-only access: Requires <code>manage_options</code> capability – only Administrators and Super Admins can access plugin features</li>
<li>High-traffic sites: Consider adjusting retention periods for optimal performance</li>
<li>Memory-intensive operations: May require increased PHP memory limits for large exports or extensive logging</li>
<li>Feed export limits: RSS/JSON feeds are limited to 50-100 entries per request</li>
<li>Real-time logging: Continuous logging may impact performance on extremely high-traffic sites</li>
<li>Database dependency: Uses MySQL/MariaDB-specific features and functions</li>
</ul>
<h3>Privacy Policy</h3>
Activity Log Pro logs user activities on your WordPress site. This may include:
<ul>
<li>User login/logout times and IP addresses (anonymized by default)</li>
<li>Content creation, modification, and deletion activities</li>
<li>Plugin and theme changes</li>
<li>Administrative actions</li>
</ul>
Data Storage: All activity logs are stored locally on your WordPress site. No log data is transmitted to external servers.
IP Address Privacy: IP addresses are automatically anonymized by default (e.g., 192.168.1.xxx) for privacy protection. Full IP addresses are only stored if explicitly enabled by administrators in the premium version.
Third-Party Services: The plugin uses ipinfo.io for optional IP geolocation lookups when administrators manually request location information, and LemonSqueezy for payment processing when users choose to purchase premium features and for newsletter subscriptions when users voluntarily sign up. The ipinfo.io service is only used when explicitly requested and data is cached locally. LemonSqueezy is only used when users voluntarily initiate premium purchases, subscription management, or newsletter signups.
Data Retention: You can configure data retention periods to meet your privacy requirements. You can configure a secure JSON feed, with access via a secure authentication token, available in Premium <a href="https://activitylog.pro/pricing/" rel="nofollow ugc">→ activitylog.pro/pricing</a>
<h3>Support</h3>
For support, documentation, and feature requests, please visit:
<ul>
<li>Plugin Website <a href="https://activitylog.pro/" rel="nofollow ugc"> → activitylog.pro</a></li>
<li>Get Support <a href="https://activitylog.pro/support/" rel="nofollow ugc"> → activitylog.pro/support</a></li>
<li>Plugin Docs <a href="https://activitylog.pro/docs/" rel="nofollow ugc"> → activitylog.pro/docs</a></li>
<li>Following on Twitter/X <a href="https://x.com/ActivityLog" rel="nofollow ugc"> → x.com/ActivityLog</a></li>
</ul>

Activity Log Pro – Event Logger, Activity Monitor & Audit Log


Well structured plugin with lots of features. Better than any other alternative available. 



The author is also really helpful and provides great support.


Excellent plugin!


I don't usually give feedback but this plugin made me say WOW.



How beautifully developer has displayed the activities, even small details, like AJAX, data changes etc.



I will recommend this to every wp user.


premium features


Perfect for multi-user WordPress sites, Activity Log Pro lets you easily track who did what and when. A must-have tool for accountability, security, and smooth team collaboration.


Best Logger, Activity Monitor

Professional WordPress Activity Log. Track logins, user actions, content changes, and system events to see who did what, when, and where.

Login Security with Telegram Alerts vs Activity Log Pro – Event Logger, Activity Monitor & Audit Log