Mark Maunder

WFMattR

wfryan

wfmatt

<h3>WORDFENCE LOGIN SECURITY</h3>
<p>Wordfence Login Security contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA.</p>
<p>Are you looking for comprehensive WordPress Security? <a href="https://wordpress.org/plugins/wordfence/" rel="ugc">Check out the full Wordfence plugin</a>.</p>
<h4>TWO-FACTOR AUTHENTICATION</h4>
<ul>
<li>Two-factor authentication (2FA), one of the most secure forms of remote system authentication available.</li>
<li>Use any TOTP-based authenticator app or service like Google Authenticator, Authy, 1Password or FreeOTP.</li>
<li>Enable 2FA for any WordPress user role.</li>
<li>Completely free to use, no limits or restrictions of any kind.</li>
</ul>
<h4>LOGIN PAGE CAPTCHA</h4>
<ul>
<li>Easily enable Google ReCAPTCHA v3 on your login and registration pages.</li>
<li>Stops bots from logging in without inconveniencing your site visitors.</li>
<li>Robust protection against password guessing and credential stuffing attacks distributed across large IP pools</li>
</ul>
<h4>XML-RPC PROTECTION</h4>
<ul>
<li>XML-RPC is the biggest target for WordPress attacks, but is often overlooked.</li>
<li>Protect XML-RPC with 2FA or disable it altogether if it’s not needed.</li>
</ul>


Wordfence Login Security

The Plugin works and integrates nicely into wordfence security and wp itself. TOTP works great, and the captcha integration works too. Sadly it doesn't support multiple 2fa methods like TOTP & "backup codes" as well as email as backup. Other 2fa methods like U2F are not supported. This Plugin doesn't work with the yubico yubikey hardware keys. 

Good, but somewhat limited

Good compliment to Wordfence, but please add login URL obfuscation!

Because you do not do this either I take another plugin as well like WPS Hide Login, or I just take WP Cerber which does everything!

Great, but...

Easy to use


Does not include the ability to limit login attempts, add password complexity requirements, or anything that would comprise modern security best practices. It's strictly a 2FA plugin, which is done more simply and better by other plugins. It does work tho.


Too much load for a simple 2FA plugin

Secure your website with Wordfence Login Security, providing two-factor authentication, login and registration CAPTCHA, and XML-RPC protection.

Melapress

WPWhiteSecurity

<p><strong> COMPREHENSIVE WORDPRESS LOGIN SECURITY PLUGIN </strong></p>
<p><a href="https://melapress.com/wordpress-login-security/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Melapress Login Security</a> enables you to effortlessly set login security policies that put you firmly in the driver’s seat of your WordPress sites. Policies are highly customizable and granular and can be implemented by user role or site-wide for complete control over the security of your WordPress login processes.</p>
<p>Use the free edition of Melapress Login Security to implement WordPress password requirements such as minimum length and complexity rules. The plugin also allows you to set password expiration policies, prevent password reuse, limit failed login attempts, and automatically disable inactive user accounts, among other things. This helps you:</p>
<ul>
<li>Prevent unauthorized login attempts</li>
<li>Protect against brute force attacks</li>
<li>Comply with GDPR with a login consent notice</li>
</ul>
<h3>Features list</h3>
<p>A secure WordPress login starts right here. Explore all of the features included with the free edition of <a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a>:</p>
<h3>Set password policies</h3>
<p>Strong passwords are your first line of defense against bad actors looking to gain access to your site. Set password requirement policies to make sure users set strong passwords. Set policies by user role or site-wide and define policy priority for users with multiple roles.</p>
<ul>
<li>Set minimum password length</li>
<li>Mandate use of upper case and lower case characters, numeric digits, and special characters</li>
<li>Set an automatic password expiration policy and advise users when their password is about to expire</li>
<li>Disallow users from recycling passwords</li>
<li>Provide users with helpful instructions during the password configuration stage</li>
<li>Disable password reset links</li>
<li>Mandate WordPress password reset on the first login</li>
</ul>
<h3>Limit login attempts</h3>
<p><a href="https://melapress.com/support/kb/melapress-login-security-failed-logins-policy-wordpress/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Limit failed login attempts</a> and put an end to brute force attacks. Protect your login form by automatically disabling user accounts after a number of failed login attempts. Choose between manual unlocking by an admin or automatic unlock after a cooldown period.</p>
<h3>Temporary login without password</h3>
<p>Provide temporary and secure login access to third-parties, like developers, editors, employees or others, without a password. It works by providing the user with a temporary login link that expires after a certain amount of time, or after a number of uses. This prevents you from having to create new user accounts manually, while simultaneously reducing the security risks associated with old, unused user accounts.</p>
<h3>Change WordPress login URL</h3>
<p>Easily deploy security-by-obscurity tactics and change your WordPress login page URL using a plugin! Hiding the default login page from hackers makes it more difficult to find, potentially reducing brute force attacks and other unauthorized access attempts. After you change the default wp-admin URL, you can set a 404 for the old login page or redirect it to any page of your choosing.</p>
<h3>Limit login page access by IP address(es)</h3>
<p>Limit access to the WordPress login page by IP address(es) for additional security.</p>
<h3>GDPR login page consent notice</h3>
<p>Easily meet GDPR requirements by adding a GDPR consent notice to the login page. This is required for GDPR and PCI DSS compliance, thus ensuring your WordPress site login page is in compliance.</p>
<h3>Emergency password reset</h3>
<p>Discovered suspicious behavior? Reset all users’ passwords with just one click and regain instant control.</p>
<h3>Upgrade to Melapress Login Security Premium and get even more benefits.</h3>
<p>The premium edition of Melapress Login Security comes bundled with even more features, which enable you to take your WordPress website login security to the next level. Disable inactive WordPress user accounts and force passwords to be reset once accounts have been unlocked. Inactive accounts can be managed within a single dashboard for increased efficiency and faster response times. Moreover, you can set accounts to be locked out after a number of failed login attempts and customize the duration and method of unlocking them.</p>
<h3>Premium features list</h3>
<ul>
<li>Everything in the free version</li>
<li>Add an additional security layer with security questions users must answer when performing actions such as password reset and account unlock</li>
<li>Automatically send users an email whenever there’s a login with their username from an unrecognized device with an option to terminate the session remotely</li>
<li>Extend or shorten session durations for better balance between security and user convinience</li>
<li>One-click integration with third-party plugins such as WooCommerce, LearnDash, Memberpress, and many others</li>
<li>Automatically <a href="https://melapress.com/inactive-users-wordpress/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">disable inactive WordPress users</a> after a set time</li>
<li>Add Geo-blocking rules to restrict login page traffic to specific countries, or block traffic from specific countries</li>
<li><a href="https://melapress.com/support/kb/melapress-login-security-limit-login-ips/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Restrict users’ login to a specific IP address</a>, or a configurable number of IP addresses</li>
<li><a href="https://melapress.com/support/kb/restrict-users-log-in-time-wordpress-website/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Restrict WordPress users’ login time by day and/or hours</a></li>
<li>Restrict login credentials to email, username, or both</li>
<li>Add a GDPR consent notice to the login page</li>
<li>See reports of when users were last active, what’s their password age, and whose password is expired</li>
<li>Receive detailed weekly summary reports over email of password resets and changes, user account lockouts, and more!</li>
</ul>
<p>| <a href="https://melapress.com/wordpress-login-security/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">UPGRADE TO PREMIUM</a> |</p>
<h3>Why you should use Melapress Login Security</h3>
<p>Melapress Login Security is a WordPress plugin built from the ground up to help you address security concerns and secure your WordPress login. Supercharge login credentials for maximum effectiveness and put a stop to unlimited login attempts, weak passwords, and inactive users. Set up policies to reduce your attack surface area such as login times restrictions, change the WordPress login URL, and much more.</p>
<h3>Free and premium support</h3>
<p>Support for the free edition of Melapress Login Security is free on the <a href="https://wordpress.org/support/plugin/melapress-login-security/" rel="ugc">WordPress support forums</a>. Premium world-class support via one-to-one email is available to the Premium users – <a href="https://melapress.com/wordpress-login-security/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">upgrade to premium</a> to benefit from priority support.</p>
<p>For any other queries, feedback, or if you simply want to get in touch with us, please use our <a href="https://melapress.com/contact/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">contact form</a>.</p>
<h4>MAINTAINED & SUPPORTED BY MELAPRESS</h4>
<p>Melapress builds high-quality WordPress security & admin plugins such as <a href="https://melapress.com/wordpress-2fa/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">WP 2FA</a>, <a href="https://melapress.com/wordpress-user-roles-editor/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Melapress Role Editor</a>,and <a href="https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">WP Activity Log</a>, the #1 user-rated activity log plugin for WordPress.</p>
<p><a href="https://melapress.com/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls" rel="nofollow ugc">Visit our website</a> to see how our plugins can help you better manage and improve the security and administration of your WordPress websites and users.</p>
<h3>Install the plugin from within WordPress</h3>
<p>Keeping a secure WordPress login page is easy with <a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a>. Simply:</p>
<ol>
<li>From your WordPress dashboard, navigate to Plugins > Add New</li>
<li>Search for “<a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a>”</li>
<li>Install & activate <a href="https://melapress.com/wordpress-login-security" rel="nofollow ugc">Melapress Login Security</a> from your Plugins page</li>
</ol>
<h3>Install the plugin manually (via file upload)</h3>
<ol>
<li>Download the plugin from the WordPress plugins repository</li>
<li>Unzip the zip file and upload the folder to the <code>/wp-content/plugins/</code> directory</li>
<li>Activate the Melapress Login Security plugin through the Plugins page in WordPress</li>
</ol>


Melapress Login Security

Implement WordPress login and password security policies with ease to beef up the security and managemet of your users & website.

Wordfence Login Security vs Melapress Login Security