SatoruHatano

Mamotte! Login URL Changer protects your WordPress site by replacing the default <code>/wp-login.php</code> with a custom URL of your choice. Unauthorized users who don’t know the secret URL will receive a 404 error or be redirected to the top page — keeping bots and brute-force attacks away from your login screen.
<h4>Key Features</h4>
<ul>
<li>Custom login URL — Set any slug (e.g. <code>mylogin</code> or <code>2024/secret</code>) as your new login endpoint.</li>
<li>Flexible block behavior — Choose to show a 404 page or redirect to the site top when the original URL is accessed.</li>
<li>IP whitelist — Restrict login access to specific IP addresses. Editors can register their own personal IP from the dashboard.</li>
<li>Trusted device management — Skip repeated authentication challenges on devices you trust (via OTP cookie).</li>
<li>Login question (story quiz) — Generate a unique story-based CAPTCHA from your own word lists (characters, places, drinks, foods, activities, items, animals). Makes login both secure and fun.</li>
<li>Login screen designer — Customize the login page’s background color, button color, logo, form style, and more — all with a live preview.</li>
<li>Contact form tab — Configure a built-in inquiry form displayed on the login screen.</li>
<li>Access log — View a history of login attempts with IP addresses, results, and timestamps.</li>
<li>Editor-safe settings — Editors (non-administrators) can update only their own IP entry via Ajax; all other settings require administrator privileges.</li>
<li>Clean uninstall — All plugin data is removed from the database on deletion.</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Block automated brute-force attacks without a heavy security plugin.</li>
<li>Add a lightweight second layer of authentication for small teams.</li>
<li>Customize the login experience to match your brand.</li>
</ul>

Mamotte! Login URL Changer

Change your WordPress login URL to a custom slug, with optional IP whitelist and trusted device management for enhanced security.

sf-geoguard

SF GeoGuard is a lightweight country-based access control plugin for WordPress.
It allows you to restrict website access by visitor country using simple ISO country codes (US, CA, GB, etc.), helping reduce unwanted traffic, bot activity, and unnecessary server load.
Main features: 
* Allow access only from selected countries 
* Whitelist IP addresses 
* Cache IP → country lookups for better performance 
* Customize the block message (HTML supported) 
* Choose what happens if the geo service is unavailable (allow or block) 
* Support for sites behind reverse proxies (Cloudflare, Nginx)
SF GeoGuard focuses on doing one thing well: restricting access by country. 
It does not modify WordPress core files and does not load unnecessary scripts on the frontend.
By default, geo checks are applied only to frontend requests. You can optionally 
enable restrictions for wp-admin and wp-login.php in the plugin settings.
<h3>External Services</h3>
This plugin connects to a third-party IP geolocation service to determine 
the visitor’s country based on their IP address.
Service used: 
IP-API (https://ip-api.com/)
Purpose: 
The service is used to detect the visitor’s country in order to apply 
country-based access rules configured in the plugin settings.
Data sent: 
– Visitor IP address
When data is sent: 
– On frontend page load when geo-based access control is enabled 
– Only if the visitor IP address cannot be resolved from the local cache
Note: 
The free IP-API endpoint does not support HTTPS. The plugin uses the HTTP 
endpoint provided by IP-API unless a paid HTTPS plan is used.
Privacy & Terms: 
– Privacy Policy: https://ip-api.com/docs/legal 
– Terms of Service: https://ip-api.com/docs/legal
No personally identifiable information other than the IP address 
is stored, logged, or shared by the plugin.

SF GeoGuard

Country-based access control for WordPress. Restrict access by country, whitelist IP addresses and reduce unwanted traffic.

Mamotte! Login URL Changer vs SF GeoGuard