Plugin Name: Limit Login Attempts Reloaded
Limit Login Attempts Reloaded stops brute force attacks and optimizes your site performance by limiting the number of login attempts that are possible through the normal login as well as XMLRPC, Woocommerce and custom login pages. This is the only plugin you’ll need for your login security needs with over 2 million downloads worldwide.
This plugin will block an Internet address (IP) and/or username from making further attempts after a specified limit on retries has been reached, making a brute force attack difficult or impossible.
WordPress by default allows unlimited login attempts. This can lead to passwords being easily cracked via brute force.
FEATURES:
- Limit the number of retry attempts when logging in (per each IP).
- Configurable lockout timings.
- Informs the user about the remaining retries or lockout time on the login page.
- Email notification of blocked attempts.
- Logging of blocked attempts.
- Safelist/Blocklist of IPs and Usernames (Support IP ranges).
- Sucuri compatibility.
- Wordfence compatibility.
- XMLRPC gateway protection.
- Woocommerce login page protection.
- Multi-site compatibility with extra MU settings.
- GDPR compliant.
- Custom IP origins support (Cloudflare, Sucuri, etc.)