harrym

WordPress uses phpass to store passwords. Because WordPress has to work everywere, it uses the portable version of phpass, 
which uses MD5 to hash passwords. MD5 is not a very good hashing algorithm for passwords, because it’s relatively fast.
This plugin switches over to bcrypt, which is the algorithm recommended by phpass, and is a much better option for password 
storage because it is much slower to produce. This makes it much harder for an attacker who’s managed to access your hashed 
passwords to obtain plain text passwords by brute-forcing, or by trying passwords from a dictionary.
Note: this plugin requires PHP 5.3.0 or newer
Be aware that if you use this plugin and then move to a host that does not support bcrypt, you will need to reset any user 
account that you want to log in with.

wp-bcrypt

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

Matt Miller

mikemm01

Cloudflare provides security and optimization services for websites all around the internet. WordPress sites are often attacked by bots or hackers and, while Cloudflare has preset firewall rules to help, it doesn’t always filter out all malicious activity.
Cloudflare IP Blacklist allows WordPress admins to add a list of prohibited usernames and if someone attempts to log in with one of these usernames, this users IP address is automatically added to the Cloudflare blacklist. By doing this, the next time this user attempts to load the site, they will be blocked by Cloudflare before their requests get to your site’s server. Add an extra layer of security today to your site!
** This plugin relies on the use of Cloudflare, a third-party service that increases security and performance for web sites and services across the internet. For more information, visit the Cloudflare website and their privacy policy. This plugin is not officially endorsed, built or maintained by the Cloudflare team; rather, we are a development company that uses their services every day! **
<h3>Localizations</h3>
This plugin is available in the following languages:
<ul>
<li>Albanian (Shqip)</li>
<li>Arabic (العربية)</li>
<li>Armenian (Հայերեն)</li>
<li>Basque (Euskara)</li>
<li>Bengali (বাংলা)</li>
<li>Bulgarian (Български)</li>
<li>Catalan (Català)</li>
<li>Chinese Simplified (简体中文)</li>
<li>Croatian (Hrvatski)</li>
<li>Czech (Čeština)</li>
<li>Danish (Dansk)</li>
<li>Dutch (Nederlands)</li>
<li>Estonian (Eesti)</li>
<li>Finnish (Suomi)</li>
<li>French (Français)</li>
<li>Galician (Galego)</li>
<li>Georgian (ქართული)</li>
<li>German (Deutsch)</li>
<li>Greek (Ελληνικά)</li>
<li>Hebrew (עברית)</li>
<li>Hindi (हिन्दी)</li>
<li>Hungarian (Magyar)</li>
<li>Indonesian (Bahasa Indonesia)</li>
<li>Irish (Gaeilge)</li>
<li>Italian (Italiano)</li>
<li>Japanese (日本語)</li>
<li>Korean (한국어)</li>
<li>Latvian (Latviešu)</li>
<li>Lithuanian (Lietuvių)</li>
<li>Macedonian (Македонски)</li>
<li>Norwegian (Norsk)</li>
<li>Persian (فارسی)</li>
<li>Persian – Afghanistan (دری)</li>
<li>Polish (Polski)</li>
<li>Portuguese – Brazil (Português do Brasil)</li>
<li>Portuguese – Portugal (Português)</li>
<li>Romanian (Română)</li>
<li>Russian (Русский)</li>
<li>Serbian (Српски)</li>
<li>Slovak (Slovenčina)</li>
<li>Slovenian (Slovenščina)</li>
<li>Spanish (Español)</li>
<li>Swedish (Svenska)</li>
<li>Tamil (தமிழ்)</li>
<li>Thai (ไทย)</li>
<li>Turkish (Türkçe)</li>
<li>Ukrainian (Українська)</li>
<li>Urdu (اردو)</li>
<li>Vietnamese (Tiếng Việt)</li>
<li>Welsh (Cymraeg)</li>
</ul>

IP Blacklist for Cloudflare

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

wp-bcrypt vs IP Blacklist for Cloudflare