beeky2

<p>Stranoweb Ajax Login replaces default WordPress login, register and lost password forms with a beautiful ajax modal popup and comes with a lot of amazing features.<br />
It’s fully customizable and responsive, includes several social logins and allows you to disable new user registration and restrict wordpress admin dashboard to certain user roles.</p>
<h3>Features</h3>
<ul>
<li>Ajax login, register and lost password modal popup (same functions are working even on non-popup mode);</li>
<li>Fully customizable login, register, lost password and logout popups and pages;</li>
<li>Drag and Drop Registration Form builder (Premium version);</li>
<li>User verification by administrator approval and email verification (Premium version);</li>
<li>Different popup layouts with image and text over image option (2 on free version, 8 on Premium);</li>
<li>Custom Logo on the forms (Premium version);</li>
<li>Custom css setting;</li>
<li>Social logins (Facebook, Twitter, Google, Linkedin, Amazon) with several icon styles and position displacement (Only twitter on free version);</li>
<li>Logged in Menu item: Once logged in the plugin adds a menu item to the selected menu with optional user thumbnail and additional submenu Thumbnail style, menu item text and submenu are fully customizable;</li>
<li>Customizable redirects and permalinks;</li>
<li>Option to redirect not logged-in users to login page (Premium version);</li>
<li>WordPress admin dashboard access restriction to users with specific roles (Premium version);</li>
<li>Password length, you can choose the minimum length required;</li>
<li>Optional reCAPTCHA v2 and reCAPTCHA v3 for new user registration form;</li>
<li>Shortcode Support;</li>
<li>Emails Customizer;</li>
<li>Shortcodes to add StranoWeb Ajax Login forms to any page or post;</li>
<li>Hooks to help developers to integrate additional functions;</li>
</ul>


StranoWeb Ajax Login

Stranoweb Ajax Login replaces default Wordpress login, register and lost password forms with a beautiful ajax modal popup and comes with a lot of amaz …

Julio Potier

Grégory Viguier

SecuPress

<p>This plugin forbids access to <strong>https://example.com/wp-login.php</strong> and creates new urls, like <strong>https://example.com/login</strong> or <strong>https://example.com/logout</strong>.<br />
This is a great way to limit bots trying to brute-force your login (trying to guess your login and password). Of course, the new URLs are easier to remember too.</p>
<p>Also remember: the use of this plugin does NOT exempt you to use a strong password. Moreover, never use “admin” as login, this is the first attempt for bots.</p>
<p>By the way, if you are looking for a complete security solution, take a look at <a href="https://wordpress.org/plugins/secupress/" rel="ugc">SecuPress</a>: Move Login is included inside.</p>
<h4>Multisite</h4>
<p>Yes! The plugin must be activated from your network.<br />
<strong>Note 1</strong>: this plugin deals only with <code>wp-login.php</code>, not with <code>wp-signup.php</code> nor with <code>wp-activate.php</code> (yet). That means <strong>https://example.com/register</strong> will still redirect to <strong>https://example.com/wp-signup.php</strong>. I think this will be the next step though, but no ETA.<br />
<strong>Note 2</strong>: if users/sites registrations are open, you shouldn’t use this plugin yet. There are some places where the log in address is hard coded and not filterable. A <a href="https://core.trac.wordpress.org/ticket/31495" title="Always use 'login' as $scheme parameter for "login-ish" URLs, and other inconsistencies" rel="nofollow ugc">bug ticket</a> is open.</p>
<h4>Requirements</h4>
<ul>
<li>You will need a FTP access: if the <code>.htaccess</code>/<code>web.config</code> file is not writable (you will need to add the given rules manually), or if something is wrong and you can’t log in anymore (see the FAQ in that case).</li>
<li>Should work on IIS7+ servers but not tested (I guess you should probably save a copy of your <code>web.config</code> file before the plugin activation).</li>
<li>For Nginx servers, the rewrite rules are not written automatically of course, but they are provided as information in the plugin settings page.</li>
</ul>


Move Login

Don't know why I didn't find "Move Login" first. I already tested 2 alternative free plugins and it was deficient in different ways.  "Move Login" is powerful, light and easy to set up. Very nice find. Thanks.

The best of the 3 ones I tested

Change your login URL for something like https://example.com/login and stop login brute-force attempts.

StranoWeb Ajax Login vs Move Login