Limit Login Attempts

Limit Login Attempts Install Statistics

447
269.96%
Today: 710 Yesterday: 263 All-time: 2,131,034 downloads
Limit Login Attempts Icon

Try plugin: Limit Login Attempts

We'll create fresh WordPress site with Limit Login Attempts installed. You have 20 minutes to test the plugin after that site we'll be deleted.

Takes ~10 seconds to install.

About Limit Login Attempts

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

169


13


3


4


12

updated: 1 year ago
since: 15 years ago
author: Johan Eenfeldt

Description

Limit the number of login attempts possible both through normal login as well as using auth cookies.

By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.

Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.

Features

  • Limit the number of retry attempts when logging in (for each IP). Fully customizable
  • Limit the number of attempts to log in using auth cookies in same way
  • Informs user about remaining retries or lockout time on login page
  • Optional logging, optional email notification
  • Handles server behind reverse proxy
  • It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂

Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish

Plugin uses standard actions and filters only.