ProgrammeLab

Ultimate Security is a WordPress plugin to enhance the security of your website.
This plugin provides you with an easy-to-use interface to: 
* Enforce minimum length requirements for customer passwords. 
* Require specific character types such as uppercase letters, lowercase letters, numbers, and special characters. 
* Manage password lifecycles by setting a password expiration period (default is 90 days) and preventing password reuse. 
* Customize error messages and provide real-time password validation so customers get immediate feedback. 
* Flexibly configure policy settings via a dedicated settings panel in WooCommerce.
With WooCommerce Password Policy, you can boost your store’s security and ensure that your customers are using strong, up-to-date passwords.
<h3>Configuration</h3>
Once activated, configure the plugin settings: 
1. Navigate to WooCommerce > Settings > Password Policy. 
2. Enable the password policy enforcement. 
3. Set the minimum password length and select which character requirements to enforce: 
 – Uppercase letters 
 – Lowercase letters 
 – Numbers 
 – Special characters 
4. Configure password lifecycle settings: 
 – Set password expiration (e.g., 90 days) 
 – Enable prevention of password reuse 
5. Customize error messages and adjust the real-time validation options as needed.
<h3>Support</h3>
For support, please visit the <a href="https://wordpress.org/support/plugin/wc-password-policy/" rel="ugc">WordPress.org support forums</a>.
<h3>Contributing</h3>
Contributions are welcome! Feel free to fork the repository and submit pull requests. For guidelines, please see the contributor documentation on WordPress.org.
<h3>License</h3>
This plugin is licensed under the GPL-2.0+ License – see the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">LICENSE</a> file for details.

Ultimate Security

johanee

Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Features
<ul>
<li>Limit the number of retry attempts when logging in (for each IP). Fully customizable</li>
<li>Limit the number of attempts to log in using auth cookies in same way</li>
<li>Informs user about remaining retries or lockout time on login page</li>
<li>Optional logging, optional email notification</li>
<li>Handles server behind reverse proxy</li>
<li>It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂</li>
</ul>
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.

Limit Login Attempts

bad role

We had initial issues and tried again and it is working better.

Getting a lot better.


I absolutely hate bloated plugins, so I love this one. It's simple and works as expected. Guess it's wise to use a plugin such as this one, against brute force attacks.



Guido


Love this plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Ultimate Security vs Limit Login Attempts