On Guard

<a href="https://www.on-guard.eu/more/pricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links" rel="friend nofollow ugc">OnGuard</a> by OnGuardX is a French fraud detection and prevention system trained on 33 million connection attempts, all hosted on a European infrastructure. It will challenge suspicious logins by email, send password compromise and warn users with new connection emails.
Getting Started video that explain in details how OnGuard will enhance your login security
<pre><code><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/GKZgrsSQ_sI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
</code></pre>
OnGuard Plugin needs you to create an account on <a href="https://www.on-guard.eu/" rel="nofollow ugc">OnGuard</a> and copy your client credentials on the WordPress OnGuard plugin page. The account creation flow will be your guide for configure your client depending on your needs.
OnGuard added value:
<ul>
<li>
Security: 1.61%* of connections are probably account hijackings and have been prevented.
</li>
<li>
Anticipation: 5.52%* of users have a password that has already been hacked on other sites and are protected.
</li>
<li>
Customizable: Customize your security settings to protect users without being intrusive.
</li>
<li>
Effective: 31%* of challenged users will not solve the challenge.
</li>
<li>
Survivability: In the event of a massive attack, attackers will fail to log in despite having the right password.
</li>
<li>
Simple: Quick integration with your architecture, fast efficiency: just add plugin and create a client and that’s all.
</li>
</ul>
*Analysis based on 33M connection attempts by <a href="https://www.kaggle.com/datasets/dasgroup/rba-dataset/data" rel="nofollow ugc">kaggle.com</a>.
<h3>Languages compatible</h3>
<ul>
<li>French</li>
<li>English</li>
<li>Spanish</li>
<li>German</li>
<li>Italian</li>
<li>Portuguese</li>
<li>Dutch</li>
<li>Russian</li>
<li>Chinese (Simplified)</li>
<li>Chinese (Traditional)</li>
<li>Japanese</li>
<li>Korean</li>
<li>Arabic</li>
<li>Turkish</li>
<li>Polish</li>
<li>Swedish</li>
<li>Danish</li>
<li>Finnish</li>
<li>Czech</li>
<li>Hungarian</li>
<li>Greek</li>
<li>Romanian</li>
<li>Indonesian</li>
<li>Vietnamese</li>
<li>Thai</li>
</ul>
<h3>External services</h3>
This plugin connects to our SaaS service API to obtain weather information. 
We list here all the cases when data are sent to our service.
<h4>When you did not subscribe to our product</h4>
If you have installed this plugin but you didn’t setup your client credentials to the setting page, you can’t take the benefits of the plugin. In this case, during login, we will send the domain of your website to our service. It’s simply for tracking purposes, to let’s us identify misuse of our plugin and help them to use it correctly.
<h4>On login success</h4>
To be able to challenge or let pass a login that succeed, we need some data.
<ul>
<li>WordPress user identifier: to be able remember user actions. Purpose is like not challenge again a user on next login on the same device for example.</li>
<li>IP address: to know the condition of the connection, distance between previous logins, is a public IP, the reputation of IP…</li>
<li>email: this information is not stored. It’s only used to analyse email host domain and, of course, be able to send email to the user to challenge him.</li>
<li>Password hash: this information is not stored. And the fact that the password is hashed means that the user’s account cannot be stolen from us. It’s only to verify how many time this password has been associated to hack accounts and send an email to the user to warn him that he has an insecure password.</li>
<li>User Agent: this information is not stored. It’s identify some characteristics of the browser to help us to evaluate the reputation of the user.</li>
<li>Fingerprint cookie: it’s simply a cookie that we store on browser. The purpose is mainly for travelers or VPN users: if a user succeeds a login challenge on a device we know his fingerprint, then if he travels and makes a new connection thousands of miles away, we still let him pass because the fingerprint is trusted.</li>
<li>Browser language: this information is not stored. Simply to know the most appropriated language to send email to the user 🙂</li>
</ul>
<h4>On challenge success</h4>
The main feature of this plugin is the ability to challenge suspicious users. To not challenge them again on a trusted device/ip we need to store that he succeeds the challenge.
<ul>
<li>Login token: after login, a token to identify the challenge is generated by us. This token is sent back after challenge success. We use it to know who’s succeed this challenge</li>
<li>OTP code: the 6 digit code that the user fills on challenge.</li>
</ul>
<h4>On password renewal</h4>
As long we warn users during login that the password is not safe, we don’t want to go into an infinite loop: we warn him, he resets the passwords with another leaked password, we warn him again on next login…
So when a user resets his password, we will check on the fly his password hash, then display that his password is associated with many hacked accounts.
<h4>Legal information</h4>
This service is provided by “ONGUARDX INC”:
<ul>
<li><a href="https://www.on-guard.eu/more/terms_of_service" rel="friend nofollow ugc">Terms of use</a>.</li>
<li><a href="https://www.on-guard.eu/more/privacy_policy" rel="friend nofollow ugc">Privacy policy</a>.</li>
</ul>

OnGuard | Advanced French login fraud detection system based on billions of data points.

OnGuard is Login Plugin that will challenge suspicious logins by email, send password compromise and new connection emails.

WPExperts.io

Nuno Sarmento

👑<a href="https://aiologin.com/pricing/?utm_source=wp_org&utm_medium=readme&utm_campaign=check_out_premium_version" rel="nofollow ugc">Check Out Premium Version</a> | 📘<a href="https://aiologin.com/docs/?utm_source=wp_org&utm_medium=readme&utm_campaign=technical_documentation" rel="nofollow ugc">Technical Documentation</a> | 🧰<a href="https://aiologin.com/features/?utm_source=wp_org&utm_medium=readme&utm_campaign=see_all_features" rel="nofollow ugc">See all Features</a>
<iframe loading="lazy" title="All In One Login for WordPress Login Security & Customization" width="750" height="422" src="https://www.youtube.com/embed/kDWrQNvZO0s?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
Looking for a one-stop solution to protect and customize your WordPress login page (wp-admin)? If that’s what you need, then <a href="https://aiologin.com/" rel="nofollow ugc">Download All in One Login Plugin NOW</a>]
Over 70,000 website owners already use All in One Login for their WordPress login security and customization. 🎉
And the reason for that is obvious! 👇
AIO Login is a top-notch WordPress admin security plugin that empowers you to secure and customize the WordPress wp-admin login page. Which means it offers robust security features and extensive customization options. 🤯
So, if you really want to level up your WordPress login security, then AIO Login is a must-have plugin. 💯
From changing the WP-Admin URL to integrating Google reCAPTCHA, AIO Login provides everything you need to secure and customize your WordPress login page.
Isn’t that amazing? Wait until you see its features❕ 😃 🚀
<h3>Key Features Our Users 🤍 About All In One Login</h3>
The All in One Login plugin includes all the essential features that ensure the best WordPress login protection and customization.
Let’s explore some of its key features: 👇
✔️ Change WP-Admin URL
Secure your site by changing the default WP-Admin URL. Hide the WordPress login page from hackers and prevent unauthorized access with a simple custom login URL.
✔️ Google reCAPTCHA
Protect your WordPress login page from spam and bots. Add Google reCAPTCHA v2 or v3 to your WP-Admin for secure authentication and reduce automated login attempts.
✔️ Limit Login Attempts
Prevent brute-force attacks by limiting failed login attempts. Lock out users after multiple failures and safeguard your WP-Admin with this WordPress limit login attempts plugin.
✔️WordPress Login Customization [Free + Pro]
Create a branded, customized WordPress login page. Use templates, custom logos, background images, and CSS to personalize the WP-Admin experience for better user engagement.
✔️ Disable Common Usernames [Pro]
Block weak or predictable usernames to improve WordPress login security. Force unique usernames and prevent attackers from exploiting common entries on your WordPress site.
✔️ Password Strength Checker [Pro]
Enforce strong passwords for WordPress users. Set minimum length, character rules, and uppercase/lowercase requirements to ensure secure credentials and prevent unauthorized WP-Admin access.
✔️ Ban User/IP Address [Pro]
Block unwanted users or IP addresses instantly. Restrict access to your WordPress login page and protect WP-Admin from hackers using this IP and user ban plugin.
✔️ App-Based 2FA [Pro]
Add two-factor authentication to WordPress login. Enhance security for WP-Admin and ensure only authorized users can access your site.
✔️ Temp Access URL [Pro]
Generate temporary access URLs for specific users. Control the number of visits and expiration to grant a short-term login without compromising WordPress site security.
✔️ Whitelist IP Addresses [Pro]
Allow only trusted IP addresses to access your WordPress login page. Restrict WP-Admin access to selected users, adding an extra security layer to your site.
✔️ Social Login Integration [Pro]
Enable users to log in with Google, Facebook, Microsoft, or LINE. Simplify WordPress and WooCommerce registration while improving security and user experience.
✔️ User Enumeration [Free + Pro]
Block attackers from discovering WordPress usernames through author or query string requests. This prevents exposure of valid usernames and strengthens login security against brute-force attacks.
✔️ WooCommerce Login Integration [Coming Soon]
Allow customers to log in with social accounts on WooCommerce checkout and account pages. Enhance login security and user experience with Google, Facebook, LinkedIn, Microsoft, or LINE.
<h3>Don’t Miss Out on Social Login Integrations</h3>
All in One Login supports social integrations with leading platforms, making sign-in faster, easier, and more secure.
<ul>
<li>Google Social Login</li>
</ul>
Let users log in with one of the most widely used authentication methods worldwide. By enabling Google login, you reduce friction for users, making registration easier.
<ul>
<li>Facebook Social Login</li>
</ul>
With billions of users globally, Facebook login is a familiar and trusted option for social logins. Allowing users to sign in with Facebook means faster onboarding and less abandonment at registration.
<ul>
<li>Microsoft Social Login</li>
</ul>
Perfect for business and education-focused websites, Microsoft login provides secure authentication. It aligns with the tools professionals already use every day.
<ul>
<li>LINE Social Login</li>
</ul>
LINE has around 184 monthly active users worldwide, which is a great option for websites targeting international audiences.
<h3>8 Key Reasons to Choose All in One Login 😎</h3>
⚡ Reason #1: Greater Security for Your WP-Admin
AIO Login provides robust security features to protect your WP Admin page.
<ul>
<li>
Change WP-Admin URL: Customize the WordPress default login path.
</li>
<li>
Ban User/IP Address: Block unauthorized access instantly.
</li>
<li>
Detailed Activity Logs: Monitor all login attempts
</li>
<li>
Limit Login Attempts: Prevent brute force attacks..
</li>
<li>
Whitelist IP Addresses: Restrict access to trusted IPs.
</li>
</ul>
⚡ Reason #2: Intuitive Branding and User Engagement
Create a better user experience with a customized WordPress login page.
<ul>
<li>
Custom Templates: Choose from a variety of templates.
</li>
<li>
Logo and Background: Add your branding elements.
</li>
<li>
Color Customization: Personalize color schemes.
</li>
<li>
Custom CSS: Advanced customization for WP-Admin.
</li>
<li>
User Engagement: Create a more engaging login page.
</li>
</ul>
⚡ Reason #3: Brute Force Protection
Protect your WordPress login page (wp-admin) from brute force attacks.
<ul>
<li>
Failed Login Limits: Set limits on login attempts.
</li>
<li>
User Lockout: Lock out users after failed attempts.
</li>
<li>
Custom Lockout Settings: Customize lockout duration.
</li>
<li>
Prevent Unauthorized Access: Secure your WP Admin.
</li>
<li>
Real-time Monitoring: Track login attempts and threats.
</li>
</ul>
⚡ Reason #4: Spam Prevention and User Verification
Prevent spam and unauthorized logins with Google reCAPTCHA integration.
<ul>
<li>
reCAPTCHA Integration: Add an extra layer of security.
</li>
<li>
Customizable Settings: Choose between v2 and v3.
</li>
<li>
Bot Prevention: Keep your login page spam-free.
</li>
<li>
User Verification: Ensure only legitimate users access your site.
</li>
<li>
User Enumeration: Prevent your usernames & ID’s from millicious attacks.
</li>
<li>
Enhanced Security: Protect against automated attacks.
</li>
</ul>
⚡ Reason #5: Comprehensive Activity Monitoring
Monitor all login activities for enhanced WordPress login security. See the username, IP address, date, time, lockout list, and more.
<ul>
<li>
IP Address Ban: Block specific IPs.
</li>
<li>
User Ban: Prevent specific users from logging in.
</li>
<li>
Custom Messages: Display messages for banned users.
</li>
<li>
Enhanced Control: Manage who can access your site.
</li>
<li>
Immediate Action: Take action against threats swiftly.
</li>
</ul>
⚡ Reason #6: Immediate Blocking of Suspicious Users
Block suspicious users instantly to prevent unauthorized access to your WordPress login page and set a custom message on display for banned users.
<ul>
<li>
Real-time Logs: Track login attempts in real time.
</li>
<li>
User Activity: Monitor user activities.
</li>
<li>
IP Address Tracking: Review IP addresses.
</li>
<li>
Failed Login Attempts: Get details on failed attempts.
</li>
<li>
Security Audits: Conduct thorough security audits.
</li>
</ul>
⚡ Reason #7: Additional Layer of Security with Mobile-Based 2FA
Add an extra layer of security with mobile-based 2FA.
<ul>
<li>
TOTP Apps Support: Use Google Authenticator, FreeOTP, or Authy.
</li>
<li>
Two-Factor Authentication: Secure your login process.
</li>
<li>
Improved Security: Ensure only authorized access.
</li>
<li>
Convenient Setup: Easy to set up and use.
</li>
<li>
Enhanced Protection: Strengthen your WP Admin security.
</li>
</ul>
⚡ Reason #8: Simplified Access with Social Login
Make logging in easier by allowing users to sign in with their existing social accounts.
<ul>
<li>
Multiple Platforms Supported: Google, Facebook, LinkedIn, and Microsoft.
</li>
<li>
Faster Onboarding: Reduce friction during registration and login.
</li>
<li>
Improved User Experience: No need to remember another password.
</li>
<li>
Lower Abandonment Rates: Minimize drop-offs at sign-in.
</li>
<li>
Seamless Integration: Works smoothly with your WordPress site.
</li>
</ul>
<h3>Technical Documentation</h3>
<a href="https://aiologin.com/documentation" rel="nofollow ugc">Click here</a> to access our detailed, step-by-step technical documentation for complete security of your WordPress login page (wp-admin).
<h3>Need Help? Get Expert Assistance</h3>
Having trouble securing or customizing your WordPress login page (WP-Admin URL)? Don’t worry, our expert support team is here to help! 🤝
Our dedicated support team is here to guide you through any issues, answer your questions, and assist you in using the plugin to its full potential.
👉 <a href="https://objectsws.atlassian.net/servicedesk/customer/portal/35/group/105/create/362" rel="nofollow ugc">Reach out by opening a support ticket</a>, for fast and reliable help. We’re here for you!

All In One Login — WP Admin Login Page Security and Customization with Google reCAPTCHA, Social Login, Limit Login Attempt, 2FA, and more.

It used to do one job, be lightweight, fast and as little code as possible.

Now it's bloated, includes Freemius library+tracking, added a new top-level menu, and includes several options that are not required.

I do not recommend. I forked the old one and kept it light and fast.

"Does one thing and does it good" - Not anymore


I used to love this plugin for its simplicity and efficiency. It performed its job flawlessly and was a great asset. However, the recent update has turned this once-free tool into a paid upgrade with numerous new features that many users may not need. This shift from a well-functioning free plugin to a feature-packed paid version feels like a betrayal to its loyal users. The essence of what made this plugin great has been lost in the quest for monetization. It's disappointing to see such a change.



RIP.


Once Perfect, Now a Paid Upgrade: A Disappointing Change

Do you want to secure and customize the WordPress login page? Download the All in One Login plugin for login page security and customization.

OnGuard | Advanced French login fraud detection system based on billions of data points. vs All In One Login — WP Admin Login Page Security and Customization with Google reCAPTCHA, Social Login, Limit Login Attempt, 2FA, and more.