WordPress Brute Force plugins

Stop password guessing attacks, secure WooCommerce, block bad IPs, block by countries (Pro), and add email 2FA. Lightweight with better performance.

SiteGurad WP Plugin is the plugin specialized for the protection against the attack to the management page and login.

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

Hide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys.

管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 かんたんな設定を行うだけで、不正アクセスや不正ログインからあなたのWordPressを保護します。

WP fail2ban uses fail2ban to protect your WordPress site.

Brute force, Login security & Two Factor Auth (2FA). Limit login. Malware & Vulnerabilities scan. FireWall. Enterprise ready security plugin.

XO Security is a plugin to enhance login related security.

Helps you to know your website's visitors by tracking their login related information like login/logout time, country, browser and many more.

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Provides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

Enforce WordPress login and password security policies to protect user accounts and prevent unauthorized logins.

Protect your WordPress site: firewall, bot & brute-force protection, anti-spam, multi-layer CAPTCHA, optional cloud threat intel.

The only plugin with 100% brute force protection that doesn't lock out genuine users.

PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security & Antispam, Security Website and Security Hardening.

A complete WordPress security firewall: blocks IPs, bots & countries. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.

Security with firewall, malware scanner, login and spam protection, and encrypted backup. WP Security Plugin includes Login Security, Limit login atte …

Fast, effective, realtime, and crowd sourced protection for WordPress. Easily block bots, brute force attempts, exploits and more without bloat.

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

This plugin blocks distributed botnet brute-force attacks on your Wordpress installation.

Protection from login, registration and reset-password brute-force attacks. No captcha.

Adds an image captcha and honeypot to the WordPress login page

Real-time firewall and anti-spam for WordPress. Block spam bots, comments, logins & registrations. No CAPTCHA, no slowdown.

Protect your WordPress. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL, set …

BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks.

Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.

WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP.

Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.

This plugin enhances the WordPress security.

Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.

Protect WordPress logins and Elementor Login/Forms using Google reCAPTCHA v2 and optional IP-based lockouts.

This plugin safeguards your website from Layer 7 DDoS attacks and IP stressors by utilizing a rate limiting feature.

login attempts, Firewall, reCAPTCHA, country restriction, Login History, change wp-login.php to anything make sure your site security.

Proteção avançada WordPress: blacklists automáticas, bloqueio por país (MaxMind), anti força bruta, reCAPTCHA e proteção XML-RPC.

Auditez et sécurisez votre WordPress en 1 clic : 50+ vérifications, protection brute force, masquage login, blocage IP automatique.

Anti-Brute Force, Login Fraud Detector Wordpress plugin is a security plugin that detects and blocks malicious IP addresses attempting to log into Wor …

Report login brute force attacks and improve login protection.

Secure your website with the most comprehensive XML-RPC Settings plugin.

Save your WordPress sites and servers from certain death during brute force attacks with Project Force Field by Orion Group!

Protect your website against Brute Force Attacks and other malicious requests that have potential to jeopardise the website’s safety or hijacking your …

Get strong protection against brute force attacks with unique two-factor authentication.

This plugin will send an email whenever a someone tries to login via the WordPress login page.

Try it out on your free dummy site:

MAT Firewall is a powerful WordPress security plugin that helps protect your website from malicious attacks, brute force attempts, and unauthorized ac …

User Security Tools provides some improvements to security in wordpress.

This plugin modifies your .htaccess file to provide protection from brute force attack bots.

Protect your WordPress site with 2FA, brute force protection, CAPTCHA, custom login URL, and security hardening.

HTTP Flood prevents your system against attacks like HTTP Flood, Land Flood, Form Spoofing, Brute Force, Remote Site Scanners and many more on similar …

Limit the number of login attempts by ip address.

Simple Login Limit & Protect is designed to protect your WordPress from hackers, with easy configuration, automatically learns from user behaviour …

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

BruteFort – Complete WordPress login security with custom login URLs, geo blocking, brute force protection, and IP restrictions in one plugin.

Enhance your site's security with Login Obfuscator.

A lightweight WordPress security plugin to prevent brute force attacks and disable XML-RPC.

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

We are currently enhancing this plugin. Kindly await the upcoming release.

Allows users to send email messages to each other as long as they know their usernames.

wPadlock adds an additional PIN field to your login page and provides additional security against brute-force attacks