Best brute force protection plugins for WordPress
The most popular brute force protection plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Kadence Security leads with 700K+ active installs, ahead of Titan Anti-spam & Security (50K+) and Quttera ThreatSign (10K+). All 23 plugins tagged “brute force protection” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 brute force protection plugins
- 1.
Kadence SecurityThe most installed brute force protection plugin, with 700K+ active installs. Rated 4.6 from 3,992 reviews, updated 3 weeks ago.
- 2.
Titan Anti-spam & Security50K+ active installs. Rated 4.5 from 370 reviews, updated 1 week ago.
- 3.
Quttera ThreatSign10K+ active installs. Rated 3.9 from 47 reviews, updated 1 day ago.
- 4.
Honeypot Toolkit400+ active installs. Rated 4.3 from 9 reviews, updated 9 months ago. Tested only up to WordPress 6.9.11.
- 5.
Kaya Login Captcha400+ active installs. Only 1 review so far, updated 1 month ago.
- 6.
WPHH SECURE100+ active installs. Rated 5.0 from 7 reviews, updated 4 months ago. Tested only up to WordPress 6.9.11.
- 7.
Anti-Brute Force, Login Fraud Detector WordPress plugin30+ active installs. No reviews yet, last updated 3 years ago. Tested only up to WordPress 6.3.14.
- 8.
Admin Safety Guard20+ active installs. Only 4 reviews so far, updated 2 months ago.
- 9.
Project Force Field20+ active installs. Rated 4.6 from 16 reviews, last updated 12 years ago. Tested only up to WordPress 3.9.40.
- 10.
Simple Login Guard10+ active installs. No reviews yet, updated 11 months ago. Tested only up to WordPress 6.9.11.
All 23 plugins tagged “brute force protection”
Kadence Security
#88by Nexcess26 days ago
Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.
- Installs
- 700K+
- Rating
- 4.6(4K)
- Downloads
- 5.6K/day
Titan Anti-spam & Security
#725by Themeisle11 days ago
Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.
- Installs
- 50K+
- Rating
- 4.5(370)
- Downloads
- 688/day
Quttera ThreatSign
Down in the last 7 days:3#2,042by quttera1 day ago
WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.
- Installs
- 10K+
- Rating
- 3.9(47)
- Downloads
- 868/day
Honeypot Toolkit
Down in the last 7 days:92#9,722by Jeff Sterup9 months ago
Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.
- Installs
- 400+
- Rating
- 4.3(9)
- Downloads
- 8/day
Kaya Login Captcha
Down in the last 7 days:3#9,725by Kaya Studio1 month ago
Protects the WordPress login, registration and lost-password forms with a simple captcha. No third-party APIs, services or dependencies required.
- Installs
- 400+
- Rating
- 5.0(1)
- Downloads
- 11/day
WPHH SECURE
Up in the last 7 days:73#15,909by WPHackedHelp5 months ago
Secure your WordPress site with one-click file locking, login path hiding, role-based access, and smart dashboard visibility.
- Installs
- 100+
- Rating
- 5.0(7)
- Downloads
- 11/day
Anti-Brute Force, Login Fraud Detector WordPress plugin
#23,856by aispera313 years ago
Anti-Brute Force, Login Fraud Detector Wordpress plugin is a security plugin that detects and blocks malicious IP addresses attempting to log into Wor …
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
Admin Safety Guard
Up in the last 7 days:692#26,068by wordpressdirect2 months ago
Stop brute force attacks for free. Limit login attempts, add 2FA and reCAPTCHA, hide wp-login.php, block IPs and see every login on your site.
- Installs
- 20+
- Rating
- 5.0(4)
- Downloads
- 0/day
Project Force Field
Down in the last 7 days:280#28,463by Faison12 years ago
Save your WordPress sites and servers from certain death during brute force attacks with Project Force Field by Orion Group!
- Installs
- 20+
- Rating
- 4.6(16)
- Downloads
- 0/day
Simple Login Guard
#29,917by Aman Brar11 months ago
Monitor failed login attempts and automatically block IPs after multiple failures. Lightweight and easy to use.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Shield WP Admin
Up in the last 7 days:78#32,028by Differenz System5 months ago
Secure and harden your WordPress admin area with powerful features like custom login URLs, reCAPTCHA, brute-force protection, and more.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
VMP Security
#33,802by VMP™9 days ago
Firewall, 9 malware scanners, 2FA, country blocking, audit log preview — all free. 750+ WAF rules and 170,000+ signatures. No paywall.
- Installs
- 10+
- Rating
- 4.5(2)
- Downloads
- 11/day
Guardify Firewall
Down in the last 7 days:2,704#39,176by BitCleric1 year ago
Guardify is a powerful WordPress firewall plugin designed to protect your website from a wide range of threats, including brute force attacks, SQL inj …
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 0/day
AuthDock
#44,709by RAKIBUZZAMAN3 days ago
All-in-one WordPress authentication: social login, magic links, 2FA, brute force protection, session management & security hardening.
- Installs
- 10+
- Rating
- –
- Downloads
- 11/day
Fortress Login Pro
Down in the last 7 days:9,585#44,837by Hamdi Saidani1 year ago
Hide and rotate your WordPress login URL. Track access, export logs, and prevent brute-force attacks with real-time visibility.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Authyo Passwordless Login
#45,604by Konceptwise Digital Media Pvt Ltd1 month ago
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Neksio Login & File Security
Up in the last 7 days:5,308#50,516by Neksio Tool1 month ago
Protect WordPress logins with two-factor authentication, monitor critical file changes, and manage security threats from a unified dashboard.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
NibbleSecure
Up in the last 7 days:13,773#54,821by MVP Plugins1 month ago
Hide your login page behind a secret URL, limit login attempts, and block brute force attacks. Includes lockout thresholds and instant email alerts.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
eSherpa Login Guard
#56,627by Ralf Naumann8 months ago
Intelligent login protection with honeypot detection, WordPress hardening, and a clear security admin overview.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
GhostLock Hide Login
#59,081by Shubham Patil28 days ago
Hide WordPress login URLs and protect against brute-force attacks with IP blocking, country detection, logs, and IP whitelisting.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Dwarpal
#68,571by Dwarpal2 days ago
Firewall, malware scan, login security, and SEO hack protection for WordPress.
- Installs
- <10
- Rating
- –
- Downloads
- 83/day
Techbox Login Security
Down in the last 7 days:2,286#71,115by techboxdesign2 months ago
Stop brute-force attacks, bots, and password guessing on your WordPress login. Limit login attempts, block bad IPs, and secure wp-login fast.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Greyfu Login Captcha
Down in the last 7 days:3,561#73,636by greyfu11 months ago
A lightweight captcha that protects your WordPress login page from automated bot attacks using a simple math challenge.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day