All 31 Login Security answers

See every answer

Answer

Does this actually stop anyone getting in?

Updated Login Security 1.6.0Tested with WordPress 7.1

It stops guessing, which is the overwhelming majority of what arrives at a WordPress sign-in page. It does not stop somebody who already has your password — from a reused password, a phished one, or a leak somewhere else.

Nothing in this plugin is a substitute for long, unique passwords on the accounts that matter, and two-factor sign-in on top of them. What it does is handle the thousands of automated attempts that arrive anyway, and tell you when something unusual is happening.

Still stuck? Ask the developers who wrote it. We aim to reply within one business day.

Login Security

Stop the machines guessing at your passwords, and see exactly who has been trying.

From $19 a year · every feature · 30-day refund

Buy Login SecuritySee the plugin

The Login Security dashboard in WordPress admin. A green notice reads 1 lockout this week, and the site is fine: 13 attempts were refused, from 4 addresses. Four cards show 13 refused this week, 1 locked out, 4 addresses and 1 signed in. A panel headed You cannot be locked out lists the address you are on, that signed-in administrators are never locked out, and the sign-in page, with a Never lock out the address I am on now button. Below it, Usernames being tried shows admin tried 7 times, marked a real account and no second step.