Best login security plugins for WordPress

Limit Login Attempts Security

#34

by WPChef4 days ago

Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.

All-In-One Security (AIOS)

#56

by David Anderson / Team Updraft11 days ago

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

Defender Security

Up in the last 7 days:2#519

by WPMU DEV - Your All-in-One WordPress Platform1 day ago

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

All In One Login

Down in the last 7 days:2#676

by Saad Iqbal11 days ago

Secure and customize your WordPress login page with a custom login URL, 2FA, CAPTCHA, and more.

BulletProof Security

#1,143

by AITpro2 months ago

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...

DoLogin Security

Down in the last 7 days:1#2,476

by WPDO27 days ago

Login security: KeyLockr SSO scan login, 2FA, passwordless login, Cloudflare Turnstile, GeoLocation/IP limits, whitelist and blacklist.

Entryway

Up in the last 7 days:5#2,906

by Md Aminur Islam3 months ago

Redirect users to any URL after login or logout with per-role rules, a searchable audit log, live session management, and email notifications.

Melapress Login Security

Up in the last 7 days:98#3,616

by Melapress1 month ago

Enforce WordPress login and password security policies to protect user accounts and prevent unauthorized logins.

SiteLock Security

Down in the last 7 days:4#5,698

by SiteLock4 months ago

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

Power Captcha reCAPTCHA

Down in the last 7 days:11#7,207

by Denis Alemán3 months ago

Protect WordPress/WooCommerce/Contact Form 7 forms from spam, brute-force attacks, fake comments, accounts, or registrations with Google reCAPTCHA.

Block wp-login

Down in the last 7 days:38#8,393

by Olly Campion1 month ago

Blocks direct access to wp-login.php and replaces it with a secret login URL to reduce brute-force traffic on Apache servers.

Login Armor

Up in the last 7 days:122#8,539

by wpformation9 days ago

Thirteen security modules + AI briefing: hide login, request firewall, brute force, 2FA, password policy, sessions, hardening, audit log. No upsells.

Kaya Login Captcha

Up in the last 7 days:93#9,620

by Kaya Studio1 month ago

Protects the WordPress login, registration and lost-password forms with a simple captcha. No third-party APIs, services or dependencies required.

IP & Country Blocker Lite

Down in the last 7 days:52#10,533

by Nurul Islam10 months ago

Advanced WordPress security plugin with IP/country blocking and two-factor authentication for comprehensive website protection.

Captchinoo, admin login page protection with Google recaptcha

Down in the last 7 days:28#10,881

by wp-buy2 months ago

Protect your WordPress login form from bots and brute force attacks with Google reCAPTCHA, a slide-to-unlock captcha, or an icon captcha.

Login Security with Telegram Alerts

Up in the last 7 days:46#12,916

by gabrielrosca2 months ago

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

Virus Finder

#16,878

by wphospital.hu7 months ago

Find viruses in your WordPress easily. Virus scan, malware finder.

Forge12 Security

Up in the last 7 days:1,549#17,635

by Forge12 Interactive GmbH7 days ago

Firewall, malware scanner, 2FA and login protection that keeps your visitors' data on your own server. No CDN, no tracking, made in Germany.

Lana Security

Down in the last 7 days:3#17,755

by Lana Codes4 years ago

Security plugin to protect website with login captcha, hide version number and security monitor

Bearmor Security

Down in the last 7 days:121#17,892

by bearmor15 days ago

Completely free WordPress security: firewall, 2FA with authenticator app, malware scan, file integrity, vulnerability alerts, AI summary.

Fuerte-WP

Down in the last 7 days:875#17,930

by Esteban5 days ago

WordPress security and maintenance plugin: schedule auto-updates, block malicious updates during supply chain attacks, enforce two-factor authenticati …

RMGCaptcha Math Guard

Up in the last 7 days:266#18,041

by Ridhwan Ahsan2 months ago

A lightweight math CAPTCHA and spam protection plugin for WordPress login, WooCommerce, and Contact Form 7 forms.

Jeba Limit Login Attempts

#18,193

by Md Jahed11 years ago

This is Jeba Limit Login Attempts wordpress plugin. Automatically lock the system for 30 minutes if a user attempts to login and fails after 3 tries.

SecurynAI

Up in the last 7 days:3,913#18,937

by WisdmLabs4 days ago

Firewall, malware scanning, and vulnerability alerts — with every finding explained in plain English and the exact fix to apply.

Polanger Admin Suite

Up in the last 7 days:1,610#20,005

by Polanger20 days ago

Secure, control and customize WordPress with modular admin tools, access controls, 2FA, Firewall protection, activity monitoring, and more.

Deskmode Suite

Up in the last 7 days:109#20,133

by 3WEB.IT1 month ago

Ultimate white label, customizer & security suite for WordPress admins and agencies. Hide notices, customize dashboards, dark mode & activity log.

Mask My Admin

#20,352

by Dropals Hosting7 months ago

A WordPress Admin URL Masking Plugin with optional IP-based whitelisting to limit access to allowed IPs only.

Reycob Form Firewall

Down in the last 7 days:12#20,552

by Victor Rodriguez1 month ago

Protects public WordPress forms, login, registration, comments, and WooCommerce product reviews with a local CAPTCHA and rate limits.

Slotbaas

Up in the last 7 days:105#22,811

by hvmediabv2 months ago

De lichte totaaloplossing voor een WordPress-website die goed op slot zit: firewall, security scanner, brute-forcebescherming en automatische updates …

ManicSoup Activity Log & Security Monitoring

#24,508

by ManicSoup10 days ago

A clean, self-hosted WordPress activity log with built-in attack detection. See who did what, when, and where — and catch credential attacks.

Nahnu Login Shield

Up in the last 7 days:792#24,809

by Jaime Alnassim20 days ago

Hyperfocused login security. CAPTCHA, brute-force lockout, geo-blocking, 2FA, honeypot, and edge WAF — all from one screen. 100% free.

Admin Safety Guard

Up in the last 7 days:692#26,068

by wordpressdirect2 months ago

Stop brute force attacks for free. Limit login attempts, add 2FA and reCAPTCHA, hide wp-login.php, block IPs and see every login on your site.

SolverGuard Spam Shield

Up in the last 7 days:192#26,853

by solverwp4 months ago

The most complete free WordPress anti-spam plugin. Protects Contact Form 7, comments, login, registration, REST API, and XML-RPC — all in one shield.

LoginArmor

Up in the last 7 days:3,217#26,899

by TechArk Solutions3 months ago

Add secure email-based 2FA authentication to WordPress logins with OTP verification, recovery codes, a grace period, and flexible user targeting.

JDITC Add Wordfence 2FA to Ultimate Member

Up in the last 7 days:1,058#28,044

by justdave2 months ago

JDITC Add Wordfence 2FA to Ultimate Member integrates Wordfence two-factor authentication and Passkeys into Ultimate Member login forms.

PowerSEC

Up in the last 7 days:963#28,052

by CinderEye LLC1 month ago

Free firewall/WAF, malware scanning, login protection, 2FA, file-integrity monitoring and local backups. Optional multi-site Central dashboard.

Simple Login Guard

Up in the last 7 days:159#29,933

by Aman Brar11 months ago

Monitor failed login attempts and automatically block IPs after multiple failures. Lightweight and easy to use.

Hard Guard Security

#30,890

by endriu77728 days ago

Free WordPress security plugin with malware scanner, vulnerability scanner, 2FA, brute force & login protection, audit log and hardening.

SessionQuota

Up in the last 7 days:1,268#30,908

by handyplugins2 months ago

Limit concurrent WordPress logins, prevent account sharing, and choose whether to block new logins or remove older sessions.

Shield WP Admin

Up in the last 7 days:339#31,861

by Differenz System5 months ago

Secure and harden your WordPress admin area with powerful features like custom login URLs, reCAPTCHA, brute-force protection, and more.

AphoniX

Up in the last 7 days:41,164#32,031

by Aphonic Solutions14 days ago

Protect WordPress login with lightweight custom CAPTCHA, Two-Factor Authentication (2FA), IP blocking, REST hardening, and custom login URL.

Owl Security

Down in the last 7 days:139#32,037

by Owlgorithm Labstoday

All-in-one WordPress security: firewall, malware scanner, login security, 2FA and automatic backups. Free, no license needed.

Ultimate Security

#33,776

by WP Ultimate Security15 days ago

Security for the AI era: 2FA, login protection, vulnerability scans, prompt injection scan and AI bot tracking. Free, 3-minute setup.

SecureGate Captcha Lite

Down in the last 7 days:515#33,982

by R.Sabbir2 months ago

Complete site security with Cloudflare Turnstile, Math & Character CAPTCHA. High-performance protection for Login, Registration, and Comment forms.

GuardianKey

Down in the last 7 days:1,009#34,702

by gbernardes9 months ago

GuardianKey is a service to protect systems in real-time against authentication attacks. It implements GK Auth Security for login protection and GKTin …

Tailwatch

#37,470

by wptailwatch21 days ago

WordPress security with backups, monitoring, SSL tracking, and file integrity checks, managed from a mobile app with real-time push alerts.

PasswordSentry

Up in the last 7 days:10,137#37,834

by DJ Abrams2 years ago

Secure WordPress by detecting shared passwords, and blocking password sharing. The plugin integrates Password Sentry app into WP to track logins.

Gatewarden

Up in the last 7 days:2,247#39,462

by Tudor Constantin3 months ago

Protect WordPress and WooCommerce with CAPTCHA, login limits, categorized audit logs, security alerts, privacy controls, and optional SMTP delivery.

WP 2 Step Authentication

Up in the last 7 days:68#40,887

by Scriptonite12 years ago

Simple 2 step authentication for the masses!

Fortress Login Pro

Down in the last 7 days:912#41,846

by Hamdi Saidani1 year ago

Hide and rotate your WordPress login URL. Track access, export logs, and prevent brute-force attacks with real-time visibility.