webvitaly

<ul>
<li><a href="http://web-profile.net/wordpress/plugins/security-protection/" title="Security-Protection" rel="nofollow ugc">Security-Protection</a></li>
<li><a href="http://web-profile.net/donate/" title="Donate" rel="nofollow ugc">Donate</a></li>
<li><a href="http://web-profile.net/wordpress/plugins/" title="WordPress plugins" rel="nofollow ugc">WordPress plugins</a></li>
</ul>
Why humans should prove that they are humans by filling captchas? Lets bots prove that they are not bots with adding javascript to their user-agents!
Security-Protection blocks and stops brute-force attacks. 
<a href="https://wordpress.org/plugins/security-protection/faq/" rel="ugc">Want to read more how Security-Protection plugin works</a>?
<ul>
<li>no captcha, because brute-force attacks is not users’ problem</li>
<li>no options, because it is great to forget about brute-force attacks completely</li>
</ul>
Plugin is easy to use: just install it and it just works.
Important: delete ‘admin’ username if you have it on your site. More than 90% of brute-force attacks try to crack the ‘admin’ username.
Few of the most commonly used and worst passwords. Do not use them or similar:
<ul>
<li>123456</li>
<li>p@s$w0rd</li>
<li>qwerty</li>
<li>qwe123</li>
<li>admin123</li>
<li>iloveyou</li>
<li>letmein</li>
</ul>
<h4>Useful:</h4>
<ul>
<li><a href="https://wordpress.org/plugins/page-list/" title="list of pages with shortcodes" rel="ugc">“Page-list” – show list of pages with shortcodes</a></li>
<li><a href="https://wordpress.org/plugins/iframe/" title="embed content" rel="ugc">“Iframe” – embed content</a></li>
<li><a href="http://web-profile.net/wordpress/plugins/" title="WordPress Pro plugins" rel="nofollow ugc">WordPress Pro plugins</a></li>
</ul>

Security-Protection

Protection from login, registration and reset-password brute-force attacks. No captcha.

Simon Prosser

How it works.
The plugin monitors failed login attempts, if the limit is reached the users IP is added to a local banlist. 
The user is now blocked and can no longer attempt to login.
Every 24 hours the plugin will upload the blocker IPs and download a fresh list of all IPs blocked accross the network in the last 7 days.
If an IP is blocked on 3 or more servers its added the the global ban list and will be blocked on all servers using the plugin.

Security-Protection vs WP-DenyHosts