Plugin info

Total downloads: 41,236
Active installs: 2,000
Total reviews: 31
Average rating: 4.8
Support threads opened: 0
Support threads resolved: 0 (0%)
Available in: 8 language(s)
Contributors: 1
Last updated: 12/5/2025 (26 days ago)
Added to WordPress: 4/16/2020 (5 years old)
Minimum WordPress version: 6.0
Tested up to WordPress version: 6.8.3
Minimum PHP version: 7.4

Maintenance & Compatibility

Maintenance score

Actively maintained • Last updated 26 days ago • 31 reviews

74/100

Is Customize WordPress Login and Registration Page – WPOrLogin abandoned?

Likely maintained (last update 26 days ago).

Compatibility

Requires WordPress: 6.0
Tested up to: 6.8.3
Requires PHP: 7.4

Similar & Alternatives

Explore plugins with similar tags, and compare key metrics like downloads, ratings, updates, support, and WP/PHP compatibility.

No similar plugins found yet.

Description

Is your WordPress site protected against constant brute-force attacks? While strong passwords help, automated bots continuously try to breach your site through the login page. WPOrLogin offers a comprehensive solution to fortify your access points while ensuring a professional and branded user experience.

With the new Limit Login Attempts module, WPOrLogin tracks failed login attempts by IP address and automatically locks out the attacker for a specified duration, stopping brute-force attacks dead in their tracks. This is an essential layer of security that works alongside our popular reCAPTCHA integration.

WPOrLogin empowers you to take full control of the entire login and registration experience:

  • Security First: Implement Brute Force Protection and Google reCAPTCHA v2/v3 on all key forms (Login, Registration, Password Recovery).
  • Branding & Design: Easily customize the login page with your company logo, custom background, and brand colors.
  • User Flow Control: Redirect users based on custom settings after login or logout.
  • Clean Experience: Remove distracting elements like the language selector.

Key Security Features (New in 2.10!)

  • Brute Force Protection: Limits login attempts by tracking failed logins per IP address and automatically applying a temporary lockout.
  • Live Security Report: Provides an admin report with forensic data, showing currently blocked IPs, time of block, and geo-location links.
  • Smart UX Warnings: Displays a clear, dynamic warning to the user on their final attempt before lockout (UX Improvement).
  • Full Security Synchronization: Guarantees that the attempt counter is correctly reset upon a successful login, preventing legitimate users from being accidentally blocked.

Core Design & Utility Features

  • Custom Logo and Background: Change the logo and adjust the background image to your preference.
  • Predefined Layouts: Choose from multiple layouts (Basic, Standard, and Premium).
  • Google reCAPTCHA v2 and v3 Compatibility: Enhance security with reCAPTCHA verification options for login, registration, and password recovery forms.
  • Custom Redirection: Allows users to be redirected after login or logout.
  • Advanced Options: Remove the language selector from the login page.
  • Mobile-Friendly Design: Optimized layout for mobile screens.

Advanced Security with Google reCAPTCHA

Today, cyberattacks, especially automated ones, pose a major threat to website security. Among these attacks are bots attempting to access your site using stolen credentials or brute-force attacks. Google reCAPTCHA is one of the most effective tools for combating these attacks. With WPOrLogin, you can easily integrate Google reCAPTCHA v2 and v3 into your login, registration, and password recovery forms, adding an extra layer of security.

Protection for Key Forms:

WPOrLogin allows you to integrate Google reCAPTCHA in:

  1. Login Form: Blocks unauthorized access attempts and brute-force attacks.
  2. Registration Form: Prevents bots from creating fake accounts on your site.
  3. Password Recovery Form: Protects against malicious password reset attempts.

Installation

There are two ways to install WPOrLogin on your WordPress site: directly from the official WordPress repository or by manually uploading the .zip file. Below, we explain both methods step by step.

Option 1: Direct Installation from the WordPress Repository (Recommended Method)

  1. Log in to your WordPress admin panel.
  2. In the sidebar menu, click Plugins and then select Add New.
  3. In the search bar, type WPOrLogin and press Enter.
  4. Find WPOrLogin in the search results and click Install Now.
  5. Once the installation is complete, the Activate button will appear. Click it to enable WPOrLogin.
  6. After activation, you can access the WPOrLogin settings from the WordPress admin panel, where you can start customizing the login and registration page.

Option 2: Manual Installation from a .zip File

  1. Log in to your WordPress admin panel.
  2. In the sidebar menu, click Plugins and then select Add New.
  3. At the top of the page, click the Upload Plugin button.
  4. Click Choose File and locate the wporlogin.zip file on your computer.
  5. Click Install Now and wait while WordPress installs the plugin.
  6. After installation, click the Activate button to enable WPOrLogin.
  7. You can now access the WPOrLogin settings in the admin panel, where you can customize the logo, colors, background images, and enable Google reCAPTCHA for added security.

Important Note:
After activating WPOrLogin, we recommend exploring all the available customization options to optimize your login page. Additionally, enabling Google reCAPTCHA and Limit Login Attempts will help protect your website from bots and unauthorized access.

Frequently Asked Questions

What is the recommended size for the logo?

A logo with a width of 200px and a height of 84px is recommended for the best display on the custom WordPress login page.

How does the Brute Force Protection work?

WPOrLogin tracks failed login attempts by IP address. Once the attempt limit (default: 3) is reached, the IP is automatically locked out for a set period (default: 20 minutes) to stop the attack.

What happens if an IP is blocked?

The blocked IP will see a generic error message and will be prevented from making new login attempts until the lockout timer expires. This is done via transients to ensure efficiency and auto-cleanup.

What happens if I forget my password and get locked out?

If you are locked out, you must wait the duration of the lockout time (default: 20 minutes) before attempting to log in again. You can use the Password Recovery link, which is protected by reCAPTCHA.

Is WPOrLogin compatible with Google reCAPTCHA v3?

Yes, WPOrLogin is fully compatible with both Google reCAPTCHA v2 and v3. You can select the version that best suits your needs directly from the plugin’s settings page.

Can I customize the background of the login page?

Yes, you can choose from several predefined free images or upload your own background image from the plugin’s customization options.

Does WPOrLogin allow users to be redirected after login or logout?

Yes, WPOrLogin includes an option to redirect users to a specific page after login or logout. You can configure custom redirections based on user roles directly from the plugin settings.

Will WPOrLogin still work if I change my theme?

Yes, WPOrLogin will work regardless of the theme you use, as it focuses on customizing the WordPress login page and does not affect the overall appearance of your theme.

Review feed

Nivardo Ch
4/17/2020

Excelente

Excelente

Screenshots

  1. Premium Design - One

    Premium Design - One

  2. Premium Design - Two

    Premium Design - Two

  3. Premium Design - Three

    Premium Design - Three

  4. Premium Design - Four

    Premium Design - Four

  5. Standard Design

    Standard Design

  6. Basic Design

    Basic Design

  7. Configuration - Basic Design

    Configuration - Basic Design

  8. Configuration - Standard Design

    Configuration - Standard Design

  9. Configuration - Premium Design

    Configuration - Premium Design

  10. Configuration - Google reCAPTCHA

    Configuration - Google reCAPTCHA

  11. Configuration - Remove Language Selector

    Configuration - Remove Language Selector

  12. Configuration - Redirect

    Configuration - Redirect

  13. Configuration - Limit Login

    Configuration - Limit Login

Changelog

2.10

  • MAJOR NEW FEATURE: Brute Force Protection (Limit Login Attempts). Stops bots from guessing passwords by tracking failed attempts by IP and locking out attackers.
  • FEATURE: Introduced a Live Block Report in the Admin panel showing blocked IPs, block time, and Geo-location links for forensic analysis.
  • FEATURE: Implemented smart, dynamic warnings shown to the user on their final attempt before lockout (UX Improvement).
  • BUGFIX: Fixed a critical synchronization issue where failed attempts were not being reset after a successful user login.
  • IMPROVEMENT: Refactored Admin Notice system into a dedicated class for better scalability and modularity.

2.9.8

  • Confirmed compatibility with WordPress 6.8.

2.9.7

  • Fixed the review notice so it can now be properly dismissed after two weeks of plugin use.
  • Improved internal scripts loading to ensure better compatibility across all admin pages.
  • Minor code improvements.

2.9.6

  • Added an option to customize the color of buttons and links on the login, registration, and password recovery pages to match your brand identity.
  • Improved the design and styling of the plugin’s built-in layouts for a better visual experience.
  • Optimized styles to ensure smooth performance on mobile devices.

2.9.5

  • In this update, the login design styles have been improved for a more polished and user-friendly experience.

2.9.4

  • This version introduces multi-language support, including the following languages: English (default), Spanish, French, Italian, German, Portuguese (Brazil) and Indonesian.

2.9.3

  • Added support for custom redirection on Login and Logout.

2.9

  • Google reCAPTCHA v3 has been implemented on the WordPress login page to enhance security.
  • Added Google reCAPTCHA to the password recovery form.
  • Security and performance improvements.
  • Updated minimum PHP requirements to 7.2.

2.8.6

  • Tested up to WordPress version 6.5.2.

2.8.5

  • Fixed: SSL issue when verifying reCAPTCHA during login.
  • Updated reCAPTCHA verification method to use wp_remote_post() instead of file_get_contents().
  • Resolved an issue with header modification in the authentication process.

2.8.4

  • Tested up to WordPress version 6.3.1.

2.8.3

  • New free images.
  • Code improvements – Admin notices.

2.8.2

  • Added: Logo width – Standard and Premium Design.
  • Added: Logo height – Standard and Premium Design.
  • Added: Logo position – Standard and Premium Design.
  • Added: Background size – Standard and Premium Design.
  • CSS code improvements – My Images.

2.8.1

  • CSS code improvements – Standard Design.

2.8

  • Code improvements.
  • Login form improvements for mobile devices.
  • Registration form improvements for mobile devices.

2.7

  • Code improvements.
  • Login form improvements.
  • Added: “Privacy Policy” menu on the WordPress login screen.
  • New: Added a Premium design.
  • New: Option to remove the language selector on the login screen (added in WordPress 5.9).

2.6

  • Code improvements.
  • Google reCAPTCHA v2 improvements in login and registration forms.
  • Added: Two new Premium designs.

2.5

  • Added: Google reCAPTCHA v2 for login and registration forms.
  • New: Option to disable Google reCAPTCHA v2 in login and registration forms.

2.4.1

  • Fixed JavaScript error.

2.4

  • New free images.

2.3

  • Code improvements.

2.2

  • Code improvements.

2.1

  • Bug fixes.

2.0

  • Added: New basic and standard design for the login page.

1.1

  • Added new CSS.

1.0

  • Initial Release.