It is a powerful WordPress security plugin designed to protect your website from brute force attacks, unauthorized logins, and hacking attempts. It enhances WordPress security with IP blocking, two-factor authentication (2FA), reCAPTCHA, and other advanced features to keep your site safe.
Key Features:
- Brute Force Attack Protection – Blocks IPs after multiple failed login attempts.
- Two-Factor Authentication (2FA) – Adds an extra layer of security by requiring a one-time password (OTP) during login.
- reCAPTCHA Support – Protects your login form with Google reCAPTCHA v2 & v3.
- IP Blacklist & Whitelist – Manually block or allow specific IPs for enhanced security.
- Passwordless Login – Allows users to log in using a one-time login link instead of a password.
- Username Auto Blacklist – Blocks common or suspicious usernames from being used.
- Login Challenge Questions – Adds a security question to prevent unauthorized logins.
- Session Management – View and manage logged-in user sessions for security monitoring.
- Email Notifications for Failed Logins – Get alerts for suspicious login attempts.
- Security Logs & Reports – Keep track of all login attempts and blocked IPs.
- XML-RPC & REST API Protection – Prevents brute force attacks on WordPress XML-RPC and REST API endpoints.
- Custom Login URL – Change the default wp-login.php URL to prevent automated attacks.
- Auto IP Unblocking – Automatically unblocks IPs after a set period to avoid permanent lockouts.