Best lockout plugins for WordPress
The most popular lockout plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Login Delay Shield leads with 70+ active installs, ahead of DadsFam Login Security (20+) and Prevent Brute Force Login (10+). All 5 plugins tagged “lockout” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 5 lockout plugins
- 1.
Login Delay ShieldThe most installed lockout plugin, with 70+ active installs. Rated 4.4 from 5 reviews, updated 1 month ago.
- 2.
DadsFam Login Security20+ active installs. No reviews yet, updated 1 week ago.
- 3.
Prevent Brute Force Login10+ active installs. No reviews yet, last updated 6 years ago. Tested only up to WordPress 5.3.27.
- 4.
Numvra Login Attempt LimiterFewer than 10 active installs. No reviews yet, updated 1 week ago.
- 5.
Takumi Private GateFewer than 10 active installs. No reviews yet, updated 1 month ago.
All 5 plugins tagged “lockout”

Login Delay Shield
Up in the last 7 days:159#18,385by michael.damoiseau1 month ago
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
- Installs
- 70+
- Rating
- 4.4(5)
- Downloads
- 11/day

DadsFam Login Security
Up in the last 7 days:514#27,293by dadsfam13 days ago
Stops brute-force attacks with its own self-learning Brain that knows your real people, locks bots out fast and fixes its own setup.
- Installs
- 20+
- Rating
- –
- Downloads
- 6/day

Prevent Brute Force Login
#46,101by ervannur6 years ago
Limit the number of login attempts by ip address.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Numvra Login Attempt Limiter
Up in the last 7 days:16,485#51,263by numvra13 days ago
Counts failed logins and locks out the address that keeps guessing, with a log of what was tried and a longer lockout each time.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Takumi Private Gate
Up in the last 7 days:5,673#63,153by yoshiromoriyama1 month ago
Lock down your private WordPress site. Force login for all visitors, block REST API and XML-RPC, and lock out repeated failed login attempts.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day