Limit Login Attempts

plugin banner

Limit rate of login attempts

Author:ThemeEgg (profile at wordpress.org)
WordPress version required:2.8
WordPress version tested:4.9.25
Plugin version:1.0.0
Added to WordPress repository:03-12-2017
Last updated:25-01-2018
Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
Rating, %:0
Rated by:0
Plugin URI:https://themeegg.com/plugins/login-attempt-li...
Total downloads:1 267
Active installs:10+
plugin download
Click to start download

Limit the number of login attempts possible both through normal login as well as using auth cookies.

By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.

Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.

Features
* Limit the number of retry attempts when logging in (for each IP). Fully customizable
* Limit the number of attempts to log in using auth cookies in same way
* Informs user about remaining retries or lockout time on login page
* Optional logging, optional email notification
* Handles server behind reverse proxy
* It is possible to whitelist IPs using a filter. But you probably shouldn’t. ????


FAQ
ChangeLog