edik

Secures the backend AND the frontend with ssl when you are logged in. If a user logs in and calls a http site you will be redirected to the equivalent https site. You do not have to manually define <code>FORCE_SSL_ADMIN</code> in the <code>wp-config.php</code>. The authentication cookies will be ssl secured.
<h4>Warning</h4>
There is no protection against ssl leaks. If you follow a http link, a <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" rel="nofollow ugc">men in the middle</a> could, for example, see which site you enter.
But he cannot steal your login session! 😀

Secured Users Front

Secures the backend AND the frontend with ssl when you are logged in

Scott Reilly

Take control of the “Remember Me” login feature for WordPress by having it enabled by default, customize how long users are remembered, or disable this built-in feature by default.
For those unfamiliar, “Remember Me” is a checkbox present when logging into WordPress. If checked, WordPress will remember the login session for 14 days. If unchecked, the login session will be remembered for only 2 days. Once a login session expires, WordPress will require you to log in again if you wish to continue using the admin section of the site.
This plugin provides three primary controls over the behavior of the “Remember Me” feature:
<ul>
<li>Automatically check “Remember Me” : The ability to have the “Remember Me” checkbox automatically checked when the login form is loaded (it isn’t checked by default).</li>
<li>Customize the duration of the “Remember Me” : The ability to customize how long WordPress will remember a login session when “Remember Me” is checked, either forever or a customizable number of hours.</li>
<li>Disable “Remember Me” : The ability to completely disable the feature, preventing the checkbox from appearing and restricting all login sessions to 2 days.</li>
</ul>
NOTE: WordPress remembers who you are based on cookies stored in your web browser. If you use a different web browser, clear your cookies, use a browser on a different machine, or uninstall/reinstall (and possibly even just restarting) your browser then you will have to log in again since WordPress will not be able to locate the cookies needed to identify you.
<h4>Compatibility</h4>
Other than the plugins listed below, compatibility has not been tested or attempted for any other third-party plugins that provide their own login widgets or login handling.
Special handling has been added to provide compatibility with the following plugins:
<ul>
<li><a href="https://wordpress.org/plugins/buddypress/" rel="ugc">BuddyPress</a> (in particular, its “Log in” widget)</li>
<li><a href="https://wordpress.org/plugins/sidebar-login/" rel="ugc">Sidebar Login</a></li>
<li><a href="https://wordpress.org/plugins/login-sidebar-widget/" rel="ugc">Login Widget With Shortcode</a></li>
</ul>
Links: <a href="https://coffee2code.com/wp-plugins/remember-me-controls/" rel="nofollow ugc">Plugin Homepage</a> | <a href="https://wordpress.org/plugins/remember-me-controls/" rel="ugc">Plugin Directory Page</a> | <a href="https://github.com/coffee2code/remember-me-controls/" rel="nofollow ugc">GitHub</a> | <a href="https://coffee2code.com" rel="nofollow ugc">Author Homepage</a>

Remember Me Controls

Have "Remember Me" checked by default on the login page and configure how long a login is remembered. Or disable the feature altogether.

Secured Users Front vs Remember Me Controls