Free protection for WordPress login attempts
The free version helps stop repeated login abuse with retry limits, automatic lockouts, and account checks. Site owners can set retry and lockout rules by IP address and username, and protect wp-login.php from automated attempts.
Built-in 2FA/MFA, firewall and bot defenses add further checks. Failed-login logs and lockout email alerts help administrators track activity, making the free tier a practical starting point for sites focused on login security.
Protection across login routes and access controls
Protection covers more than the standard WordPress login page, with access rules that can be tailored to a site's setup.
- Login routes: Covers WooCommerce logins, XML-RPC requests, custom login forms, registration pages, and multisite logins; useful for sites with member or store access.
- IP and username rules: Safelists and denylists support both IP addresses and usernames, including IPv6 ranges.
- IP origin settings: Custom IP-origin configuration helps identify visitor addresses behind proxies or reverse proxies. If the server is configured incorrectly, users may appear to share one IP, so a lockout could block everyone; check this setting before relying on IP-based limits.
Premium cloud protection and shared security controls
Premium adds cloud-based attack handling and tools for coordinating security across sites, with a 14-day trial.
- Cloud intelligence: Real-time malicious-IP data, automatically generated denylists, and synchronized lockouts and lists across websites can help coordinate responses.
- Attack handling: Excessive failed-login requests can be offloaded from the site’s server, while country blocking and escalated throttling add further controls.
- Monitoring and registration: Premium protects registration pages and adds successful-login tracking, analytics, and geolocation data.
- Administration and support: Cloud backups of IP security data, CSV exports, and premium support are included; these additions are most relevant to teams managing several sites or needing more detailed reporting.
A widely adopted plugin with support follow-through to watch
The plugin is among the directory’s most widely installed, has an excellent user-rating description, and was updated a little over a month ago. Those are positive signals for adoption, user satisfaction, and ongoing maintenance.
Support responsiveness is a consideration for sites where login protection is critical: 8 threads are recorded, with 38% resolved. That is a low resolved share in a small sample, so weigh it alongside the strong rating and recent update; confirm that the free controls meet your needs, and consider whether Premium support is important for your operation.
