Best bruteforce plugins for WordPress
The most popular bruteforce plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. WP Login Door leads with 400+ active installs, ahead of Security-Protection (300+) and BruteGuard (100+). All 7 plugins tagged “BruteForce” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 6 bruteforce plugins
- 1.
WP Login DoorThe most installed bruteforce plugin, with 400+ active installs. Rated 5.0 from 6 reviews, last updated 1 year ago. Tested only up to WordPress 6.8.12.
- 2.Security-Protection
300+ active installs. Rated 4.3 from 11 reviews, last updated 6 years ago. Tested only up to WordPress 5.5.24.
- 3.
BruteGuard100+ active installs. Only 2 reviews so far, last updated 4 years ago. Tested only up to WordPress 5.9.20.
- 4.
WebDmitriev Protection20+ active installs. No reviews yet, updated 2 months ago.
- 5.WP-DenyHosts
20+ active installs. Only 1 review so far, last updated 13 years ago. Tested only up to WordPress 3.6.1.
- 6.
Guard10+ active installs. No reviews yet, last updated 10 years ago. Tested only up to WordPress 4.7.39.
All 7 plugins tagged “BruteForce”

WP Login Door
Up in the last 7 days:5#9,410by toxnico1 year ago
Adds a secret URL key to access the login page and lets you disable XML-RPC, protecting against bruteforce attacks.
- Installs
- 400+
- Rating
- 5.0(6)
- Downloads
- 11/day
Security-Protection
Down in the last 7 days:58#10,085by webvitalii6 years ago
Protection from login, registration and reset-password brute-force attacks. No captcha.
- Installs
- 300+
- Rating
- 4.3(11)
- Downloads
- 0/day

BruteGuard
Up in the last 7 days:1#13,378by EverPress4 years ago
BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks.
- Installs
- 100+
- Rating
- 5.0(2)
- Downloads
- 0/day

WebDmitriev Protection
Down in the last 7 days:60#27,432by webdmitriev2 months ago
Lightweight security module, attack protection, and file integrity monitoring.
- Installs
- 20+
- Rating
- –
- Downloads
- 3/day
WP-DenyHosts
Down in the last 7 days:295#28,572by Simon Prosser13 years ago
Distributed anti bruteforce plugin.
- Installs
- 20+
- Rating
- 5.0(1)
- Downloads
- 1/day

Guard
#46,031by Mitch10 years ago
Guard protects your wp-admin against bruteforce attacks.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day