DJ Abrams

Password Sentry (PS) is the must-have application for every membership site! We developed and released Password Sentry in 1999. Password Sentry was groundbreaking as the first application of its kind. Password Sentry continues to be groundbreaking as we grow and re-invent Password Sentry to continue to be the leader in the industry – exceeding anything our competition offers. Password Sentry is an affordable and reliable tool used by thousands of clients to secure and protect thousands of websites from password trading and dictionary / brute force attacks: saving webmasters hundreds or thousands of dollars each year in extra bandwidth, and lost sales. Password Sentry is a free Open Source App.
WordPress (WP) has become a CMS (Content Management System) for many webmasters. In particular, paysite webmasters who offer paid memberships. To that end, we have seen an explosion of apps and WP plugins that enhance the membership functionality of WP. Our plugin is the perfect fit to WP and those plugins. PasswordSentry Plugin hooks into the WP Login to track and log logins to detect and block password sharing and compromised passwords. The PasswordSentry Plugin protects your members and your WP from hackers trying to access your members WP accounts. It also protects your bottom line if you run a paysite by blocking members from sharing their passwords with others. The PasswordSentry Plugin depends on the Password Sentry App: <a href="https://www.password-sentry.com/" title="Password Sentry" rel="nofollow ugc">Password Sentry</a>. The Password Sentry App includes a standalone, web-based control panel (PS AdminCP) to manage Password Sentry App and logged WP users.
o Detect and block password sharing via UserTracking and GeoTracking technology
o Web-based control panel to administer Password Sentry App, and monitor / manage users
o Priority Support [Fee-Based]
o FREE Regular Forum Support
o FREE updates
o Unlimited Domains
o Capability to block logins from specified countries, and/or IP addresses
o Monitor and throttle per-user bandwidth
Before you use this plugin, you must FIRST install the Password Sentry App. Once the Password Sentry App is fully installed and configured, you can then activate and configure the PasswordSentry Plugin. This plugin monitors WP logins, checking for password sharing. If password sharing is detected for a given user, that user is automatically suspended, and you are emailed. Suspended users can either be manually restored via PS AdminCP, or you can setup a cron job to automatically restore suspended users after XX minutes.

PasswordSentry

Secure WordPress by detecting shared passwords, and blocking password sharing. The plugin integrates Password Sentry app into WP to track logins.

Nurul Islam

IP & Country Blocker Lite is a comprehensive WordPress security plugin that provides multiple layers of protection for your website. Block unwanted visitors based on IP addresses or countries, and add an extra layer of security with two-factor authentication (2FA).
Security Features: 
* IP Address Blocking: Block or allow specific IP addresses, IP ranges, or subnets 
* Country-Based Blocking: Restrict access based on visitors’ countries 
* Two-Factor Authentication: Secure admin logins with email-based 2FA or authenticator apps 
* Recovery Codes: Backup access codes for account recovery 
* Emergency Recovery: Generate secure recovery URLs to disable the plugin if locked out 
* Advanced Security Dashboard: Monitor blocked attempts and security events
Key Benefits: 
* Protect against spam, bots, and malicious traffic 
* Prevent brute force attacks on admin login 
* Block entire countries or regions 
* Easy-to-use admin interface with real-time monitoring 
* Lightweight and fast performance 
* No external dependencies for core functionality
Easy Management: 
* One-click blocking/unblocking 
* Intuitive admin panel with tabbed interface 
* Real-time activity logs 
* Bulk operations support 
* Custom blocked page templates
Monitoring & Analytics: 
* Track blocked IP attempts 
* View country-wise access statistics 
* Monitor security events 
* Export blocking rules
Privacy & Compliance: 
* Uses free IP-API.com service for geolocation 
* No personal data storage 
* GDPR compliant 
* Respects user privacy
<h3>Data Collection & Privacy</h3>
For transparency, here’s what data the plugin collects and why:
<h3>Essential Data Collection (Always Required for Functionality):</h3>
<ul>
<li>
IP Addresses: Collected for security blocking and geolocation features
<ul>
<li>Purpose: Enable IP/country blocking, security monitoring, and access control</li>
<li>Storage: Temporary (not stored in database, only processed in memory)</li>
<li>Third Parties: Sent to IP-API.com for country lookup (free service)</li>
</ul>
</li>
<li>
Country Information: Derived from IP addresses via geolocation
<ul>
<li>Purpose: Enable country-based blocking and access statistics</li>
<li>Storage: Not stored permanently (only used for blocking decisions)</li>
<li>Third Parties: Retrieved from IP-API.com (free geolocation service)</li>
</ul>
</li>
</ul>
<h3>Optional Data Collection (Only with User Consent):</h3>
<ul>
<li>
Plugin Usage Statistics: Anonymous plugin performance data
<ul>
<li>Purpose: Improve plugin quality and fix bugs</li>
<li>Data Collected: Plugin version, WordPress version, PHP version, activation date</li>
<li>Storage: Remote server (only if user consents)</li>
<li>Privacy: Completely anonymous, no personal identifiers</li>
</ul>
</li>
<li>
User Feedback: Plugin reviews and feedback submissions
<ul>
<li>Purpose: Understand user needs and improve features</li>
<li>Data Collected: Feedback text, rating, plugin version, PHP version</li>
<li>Storage: Remote server (only if user consents)</li>
<li>Privacy: Anonymous feedback, no personal data required</li>
<li>Privacy Policy: http://codecanvasbd/privacy-policy</li>
</ul>
</li>
</ul>
<h3>Data Collection Controls:</h3>
<ul>
<li>Consent Required: Optional data collection requires explicit user consent</li>
<li>Easy Opt-out: Users can decline consent at any time</li>
<li>No Automatic Collection: No data sent without user permission</li>
<li>Transparent Process: Clear consent modal explains what data is collected</li>
</ul>
<h3>Third-Party Services:</h3>
<ul>
<li>
IP-API.com: Free geolocation service for country detection
<ul>
<li>Data sent: Visitor IP addresses</li>
<li>Purpose: Determine visitor country for blocking features</li>
<li>Privacy: IP-API.com privacy policy applies</li>
</ul>
</li>
<li>
Remote Analytics Server (optional, consent required):
<ul>
<li>Data sent: Anonymous usage statistics</li>
<li>Purpose: Plugin improvement and support</li>
<li>Privacy: No personal data, fully anonymous</li>
</ul>
</li>
</ul>
<h3>GDPR Compliance:</h3>
<ul>
<li>✅ No personal data storage without consent</li>
<li>✅ Clear consent mechanisms</li>
<li>✅ Easy opt-out options</li>
<li>✅ Transparent data practices</li>
<li>✅ Data minimization principles</li>
</ul>
<h4>Main Features</h4>
IP & Country Blocking: 
* Block specific IP addresses or ranges (CIDR notation supported) 
* Block entire countries or allow only specific countries 
* Whitelist important IPs for access 
* Real-time blocking with immediate effect
Two-Factor Authentication (2FA): 
* Email-based 2FA for easy setup 
* Authenticator app support (Google Authenticator, Authy, etc.) 
* Recovery codes for account access 
* Secure code generation and validation 
* Admin email verification
Emergency Recovery System: 
* Generate secure recovery URLs to disable plugin if locked out 
* Time-limited recovery hashes (24 hours expiration) 
* One-click plugin deactivation via recovery URL 
* Secure hash verification to prevent unauthorized access
Admin Interface: 
* Modern, responsive dashboard 
* Tabbed navigation for easy access 
* Real-time statistics and charts 
* Activity logs with filtering 
* Bulk operations for efficiency
Security Monitoring: 
* Track blocked access attempts 
* Country-wise visitor statistics 
* Failed login monitoring 
* Security event logging
Performance Optimized: 
* Lightweight codebase 
* Minimal database queries 
* Fast IP lookups 
* Caching support
<h3>External Services</h3>
This plugin uses the IP-API.com service to detect the user’s location based on their IP address. 
– Service: IP-API.com (http://ip-api.com) 
– Purpose: IP geolocation for country-based blocking 
– Data Sent: User’s IP address only 
– Privacy Policy: http://ip-api.com/docs/legal 
– Data Storage: No personal data is stored by this plugin
The plugin works without this service but country blocking features will be limited.
<h3>Support</h3>
For support, bug reports, or feature requests: 
– WordPress.org Support Forum: https://wordpress.org/support/plugin/ip-blocker-lite/ 
– GitHub Issues: Report bugs and request features 
– Email: Contact through WordPress.org profile
<h3>Contributing</h3>
Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.
<h3>Credits</h3>
<ul>
<li>Developer: Nurul Islam (faqnurul)</li>
<li>Icons: Dashicons (WordPress)</li>
<li>Geolocation: IP-API.com (free tier)</li>
<li>Charts: Chart.js library</li>
</ul>
<h3>License</h3>
This plugin is licensed under the GPLv2 or later. 
License URI: http://www.gnu.org/licenses/gpl-2.0.html
Take control of your website’s security and protect it from unwanted visitors with IP & Country Blocker Lite!

IP & Country Blocker Lite

Advanced WordPress security plugin with IP/country blocking and two-factor authentication for comprehensive website protection.

PasswordSentry vs IP & Country Blocker Lite