Simon Kraft

Thomas Günther

protect.one

<p>Out of the box, WordPress allows unlimited attempts to log in. This opens up opportunities for attackers to crack passwords simply by trying over and over again. This kind of attack is called brute-force, and <em>Protect Login</em> mitigates this by slowing down the login after a series of subsequent failed attempts.</p>
<p>But we did not stop there. We’re also working on ways to improve the security of your WordPress passwords. Currently, we do this by allowing you to enforce a password policy to make sure your users don’t use weak passwords for their accounts.</p>


Protect Login

Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.

wp-buy

osama.esh

mohmmed alagha

<p>Limit the number of login attempts possible both through normal login as well as using auth cookies.</p>
<p>By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.</p>
<p>Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.</p>
<h3>Basic Features</h3>
<ul>
<li>Limit the number of retry attempts when logging in.</li>
<li>Configurable lockout timings.</li>
<li>Email notification of blocked attempts (Detailed email containing all necessary information).</li>
<li>Notify the user of remaining attempts.</li>
<li>Report containing all blocked attempts.</li>
<li>Whitelist/Blocklist of IPs (Support IP ranges).</li>
<li>Allow/Block Countries.</li>
<li>Automatically block IP addresses that exceed limit login attempts</li>
<li>Automatically add IP addresses that exceed blocks limit to the deny list</li>
<li>Send notifications about blocked retry (Email sent to admins)</li>
<li>Inform the user about the remaining retries or lockout time on the login page.</li>
<li>Unlock The Locked users – Easily unlock the locked admin through the email or dashboard.</li>
<li>Limit the number of retry attempts when logging in per IP.</li>
<li>Limit the number of attempts to log in using cookies.</li>
<li>Optional logging and optional email notification.</li>
<li>Compatible with Google captcha, Captcha Plus & reCaptcha.</li>
<li>Dashboard gives you an overview of your site’s security.</li>
<li>Enable or disable the plugin functionality</li>
<li>Enable to disable email notifications</li>
<li>Compatible with latest WordPress version</li>
<li>Woocommerce login page protection.</li>
<li>Wordfence & Sucuri compatibility.</li>
<li>GDPR compliant.</li>
</ul>
<h3>Advanced Features (PRO)</h3>
<ul>
<li>All Basic features included.</li>
<li>Save the password that was used by the hacker (Save part of the password and hide the last three digits).</li>
<li>Advanced dashboard gives you an overview of your site’s security (Charts for the most important reports).</li>
<li>Block attackers by IP, Country, IP range.</li>
<li>Mobile Application for the admins to follow up the site security (<a href="https://www.wp-buy.com/wp-content/uploads/apps/login-attempts-app.apk" rel="nofollow ugc">Download APK</a>).</li>
</ul>
<h3>Video Description</h3>
<div class="embed-vimeo" style="text-align: center;"><iframe loading="lazy" src="https://player.vimeo.com/video/585819426" width="750" height="422" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe></div>
<h3>Plugin Settings and Reports</h3>
<div class="embed-vimeo" style="text-align: center;"><iframe loading="lazy" src="https://player.vimeo.com/video/585820422" width="750" height="422" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe></div>


Limit Login Attempts (Spam Protection)

Great plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Protect Login vs Limit Login Attempts (Spam Protection)