WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring
- Installs
- 1+ million
- Rating
- 4.8 (1.5K)
- Updated
- 38 days ago
All In One Login
Secure and customize your WordPress login page with a custom login URL, 2FA, CAPTCHA, and more.
- Active installs
- 60,000+
- #674 of 1,000
- Downloads, all time
- 1.4M
- 1,448,693
- Downloads, 30 days
- 32.8K
- 25.4K in the last 7
- Rating
- 3.6 / 5
- 35 reviews
- Last updated
- 1 day ago
- Oct 30, 2026
- Version
- 2.5.1
- 45 releases
Upkeep and compatibility
| Last updated | October 30, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.1.4Covers WordPress 7.1.4, the current release |
| Needs WordPress | 6.2 or newer |
| Needs PHP | 7.4 or newer |
| First published | February 27, 2019 |
| Support, last two months | 4 of 5 threads resolved (80%) |
Reviews
3.6 / 5 from 35 reviews
| 5 stars | 22 |
|---|---|
| 4 stars | 1 |
| 3 stars | 0 |
| 2 stars | 1 |
| 1 star | 11 |
Downloads, last 30 days
What the author says it does
WordPress Login Page Plugin
All In One Login helps you protect and customize your WordPress login experience. Change the login URL, add Email 2FA or Email OTP, block or allow IPs, review activity logs, and style the login page with templates.
Documentation | Pro features
Looking for a one-stop solution to secure and customize your WordPress login page (wp-login.php)? If that’s what you need, you’re in the right place.
Over 60,000 website owners use All In One Login to secure and customize their WordPress login pages. 🎉
The reason is obvious! 👇
All In One Login is a complete WordPress login security plugin that helps you secure and customize your WordPress login page with security features and customization options. 🤯
From changing the WordPress login URL to integrating Google reCAPTCHA, All In One Login offers features to help protect and customize your WP login page.
Isn’t that amazing? Wait until you see its amazing features! 😃 👇
Key Features Our Users Love About All In One Login (Free + Pro)
The All in One Login plugin includes all the essential features that ensure the best WordPress login protection and customization.
Free Version Includes the Following Features: 👇
• Wp-login.php URL Customization
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Questions the author answers
What is All In One Login?
All In One Login is a WordPress login security and customization plugin that helps protect your website from unauthorized access. It includes features such as custom login URLs, brute-force protection, two-factor authentication, passwordless login, social login, and login page customization.
Can I receive security alerts in Slack?
Yes. All In One Login Pro sends security alerts to your Slack workspace for events such as failed login attempts, IP lockouts, and suspicious activity.
Does All In One Login support webhooks?
Yes. All In One Login Pro lets you send security events to HTTPS endpoints and connect with automation tools such as Zapier, Make, n8n, and custom APIs.
What happens if I lose access to my two-factor authentication method?
All In One Login Pro supports one-time backup codes that you can use to regain access when your primary two-factor authentication method is unavailable.
Can I change the default WordPress login URL?
Yes. All In One Login lets you customize the default WordPress login URL to make your login page less predictable and help reduce unwanted login attempts.
Which social login providers does All In One Login support?
All In One Login Pro supports Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE, allowing users to sign in with their existing accounts.
Latest changelog entry
- WordPress.org compliance and Plugin Check cleanup.
- Harden 2FA settings REST, OTP anti-enumeration, and admin email localization.
- Safer Free uninstall (no Pro option wipe); SSL verify on redirect URL checks.
- Pair-guard notice dismiss persistence; network settings scripts extracted from HEREDOC.
- Show AIO Login Customize panel under Appearance → Customize.
- Move Login Redirection Order UI/logic to Pro; Free no longer ships Order feature code.
- Readme external services, Free/Pro IP docs, and packaging metadata updates.
Screenshots
Login Security Dashboard 
Custom Login URL Settings 
Google reCAPTCHA Setup 
Login and Logout Redirection
Tagged
Plugins that share its tags
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
- Installs
- 5+ million
- Rating
- 4.7 (5K)
- Updated
- 31 days ago
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
- Installs
- 3+ million
- Rating
- 4.9 (8.9K)
- Updated
- 5 days ago
#57 by installs
All-In-One Security (AIOS) – Security and Firewall
Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.
- Installs
- 1+ million
- Rating
- 4.7 (1.7K)
- Updated
- 1 day ago
#212 by installs
Advanced Google reCAPTCHA
Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.
- Installs
- 200,000+
- Rating
- 4.8 (430)
- Updated
- 25 days ago
#218 by installs
LoginPress | wp-login Custom Login Page Customizer
LoginPress is a Custom Login Page Customizer plugin allows you to easily customize the layout of login, admin login, client login, register pages.
- Installs
- 200,000+
- Rating
- 4.8 (1.1K)
- Updated
- 4 months ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin.