Loginizer

What the author says it does

Loginizer is a WordPress plugin which helps you fight against bruteforce attack by blocking login for the IP after it reaches maximum retries allowed. You can blacklist or whitelist IPs for login using Loginizer. You can use various other features like Two Factor Auth, reCAPTCHA, PasswordLess Login, etc. to improve security of your website.

Loginizer is actively used by more than 1000000+ WordPress websites.

You can find our official documentation at https://loginizer.com/docs. We are also active in our community support forums on wordpress.org if you are one of our free users. Our Premium Support Ticket System is at https://loginizer.deskuss.com

Free Features :

• Brute force protection. IPs trying to brute force your website will be blocked for 15 minutes after 3 failed login attempts. After multiple lockouts the IP is blocked for 24 hours. This is the default configuration and can be changed from Loginizer -> Brute force page in WordPress admin panel.
• Failed login attempts logs.
• Blacklist IPs
• Whitelist IPs
• Custom error messages on failed login.
• Permission check for important files and folders.
• Allow only Trusted IP.
• Blocked Screen in place of the Login page.
• Email Notification on successful login.
• Let users login with LinkedIn

Get Support and Pro Features

The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.

Latest changelog entry

2.1.3

• [Security] Fixed a security issue in the HybridAuth library used by Social Login. [Reported by Nathan Cross (CyberBadger)]
• [Feature Pro] Passkeys: You can now log in to your website using passkeys, making authentication faster, easier, and more secure without the hassle of passwords.
• [Improvement Pro] Microsoft Social Login now identifies users by their Microsoft account ID instead of their email. The first Microsoft login to an account, or a registration, is now confirmed with a code sent to the user’s email.