Simon Kraft

Thomas Günther

protect.one

Out of the box, WordPress allows unlimited attempts to log in. This opens up opportunities for attackers to crack passwords simply by trying over and over again. This kind of attack is called brute-force, and Protect Login mitigates this by slowing down the login after a series of subsequent failed attempts.
But we did not stop there. We’re also working on ways to improve the security of your WordPress passwords. Currently, we do this by allowing you to enforce a password policy to make sure your users don’t use weak passwords for their accounts.

Protect Login

Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.

andersvinther2

WP Login Security 2 provides enhanced security by requiring users to whitelist their IP address. 
If the IP address is not recognized, the plugin will send an email to the user with a link that contains a one-time key. Optionally the blog administrator can also be notified.
If a user logs in from a known IP address no further action is required.
What does this Plugin do?
<ol>
<li>Each time a user logs in, the plugin will compare their existing IP address to the last seen IP address.</li>
<li>If the IP does not match or no IP addresses have been whitelisted, an email will be sent to the users registered email address.</li>
<li>The user must login to their email and click the included link, which contains the one-time password.</li>
<li>The plugin can be configured to also send an email to the blog administrator as well as the user. </li>
</ol>
Updates from the original plugin
This plugin is based on the original <a href="https://wordpress.org/extend/plugins/wp-login-security/" rel="ugc">WP Login Security</a> plugin developed by joshuascott94.
Since the original plugin is not supported any longer we took over and made a few updates:
<ol>
<li>Fixed: Incorrect number of parameters were passed to mt_rand().</li>
<li>Recoded: The plugin notifications on the login screen only worked when Output Buffering was turned on in php.ini.</li>
<li>Added buttons to clear whitelist and outstanding activation codes.</li>
<li>Added code to clean up data on uninstallation.</li>
</ol>

WP Login Security 2

Whitelist User IP addresses. If a user logs in from an unknown IP the plugin sends an email to the user and optionally the admin with a one-time key.

Protect Login vs WP Login Security 2