Best login security plugins for WordPress

FirePhage Security

#42,954

by Nikola (FirePhage)3 months ago

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

AuthDock

#44,709

by RAKIBUZZAMANtoday

All-in-one WordPress authentication: social login, magic links, 2FA, brute force protection, session management & security hardening.

BroodWeb Malware Scanner

Down in the last 7 days:2,699#44,887

by Md Jubayer Hossain5 months ago

Scan WordPress files and database content for suspicious code, malware indicators, file integrity changes, login abuse, vulnerabilities, and firewall …

Secure Admin Access

Down in the last 7 days:2,627#45,585

by maheshkathiriya9 years ago

Secure Your Website Admin And Dashboard Access & Modify Login Page Design & Login Attempts for login protection

CloudScale Cyber & DevTools

Down in the last 7 days:16,997#46,594

by andrewjbaker3 days ago

Secure your WordPress site without an IT team. Free firewall, two-factor, passkeys and AI audits, with plain-language insights and simple fixes.

Limit Login Attempts Security

Down in the last 7 days:4,725#46,924

by WPDO7 years ago

A lightweight version of DoLogin with GeoLocation for login security only. For the full features, please use this free plugin: https://wordpress.

LoginBerry

Down in the last 7 days:2,401#46,933

by BerryPress14 days ago

Secure WordPress and WooCommerce logins: email verification, two-factor authentication (2FA), passwordless login, login logs, and last-login tracking.

Brute Force Protector

Down in the last 7 days:1,404#47,391

by Kanhaiya Yaduwanshi5 months ago

Protect your WordPress site from brute force attacks, login security threats, and unauthorized access. Limit login attempts, block malicious IPs, and …

WPTrigone Security

Down in the last 7 days:16,599#47,910

by Olivier / WP Trigone7 days ago

Professional security plugin focused on hardening, and essential security best practices for business websites and WooCommerce stores.

Authyo Passwordless Login

Up in the last 7 days:32#48,180

by Konceptwise Digital Media Pvt Ltd1 month ago

WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.

GeniousSonu Site Checkup

Up in the last 7 days:18,451#50,788

by SAHINUR19 days ago

Strengthen your WordPress security with an automated hardening checklist, vulnerability scanner, one-click safe fixes, and client audit reports.

Gupti 2FA

Up in the last 7 days:8,785#51,101

by plexomedia2 months ago

Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.

Jikida Security

#51,181

by jikida1 month ago

Malware scanner, firewall (WAF), login & brute-force protection, and file-integrity monitoring for WordPress. Blocks attacks, hardens your site, a …

Kwistech Secure

Up in the last 7 days:5,180#53,162

by kwistech2 months ago

Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.

Digipacket Login Security with Two-Factor Authentication

Up in the last 7 days:19,472#54,114

by Digipacket4 months ago

Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.

NibbleSecure

Up in the last 7 days:1,323#54,138

by MVP Plugins1 month ago

Hide your login page behind a secret URL, limit login attempts, and block brute force attacks. Includes lockout thresholds and instant email alerts.

ShivWeb Login Verification

Up in the last 7 days:5,790#54,833

by shivweb2 months ago

Two-factor authentication by email code. Users log in with their password, then enter a login code from their inbox. WooCommerce ready.

DCI Admin Security

Up in the last 7 days:5,958#54,911

by DreamCode Infotech27 days ago

Protect WordPress login and wp-admin with IP allowlisting, custom login URLs, email OTP, rate limiting, CAPTCHA, logging and alerts.

JAT Site Shield

#55,178

by Jeremy Anderson3 days ago

Lock WordPress down: login lockouts, two-factor codes, core hardening, an activity log with email alerts, and file integrity checks.

SPIDY 2FA LOGIN

Down in the last 7 days:4,253#55,529

by carlocozzetto11 days ago

Two-factor authentication (2FA) via email, SMS or biometric login (WebAuthn/FIDO2) for WordPress. Simple, free, no third-party app required.

PW Security and Backup

Up in the last 7 days:11,962#55,548

by pwfeedtr3 months ago

Security monitoring, login protection, file integrity checks, protected backups, and read-only comparison in one panel.

LogiShield Security

Up in the last 7 days:5,952#56,068

by newWebber8 months ago

LogiSheild Security with 2FA, limit login, custom login URL, and temp login is your go-to login security plugin for WordPress.

eSherpa Login Guard

#56,627

by Ralf Naumann8 months ago

Intelligent login protection with honeypot detection, WordPress hardening, and a clear security admin overview.

Rishav AuthNova OTP

#56,692

by rishav0016 months ago

OTP verification for WordPress login, registration, and password reset using email and SMS delivery.

Login Protection

Up in the last 7 days:12,313#57,016

by schway7 years ago

Login Protection - Email login and phone login with SafePassword Login Security protect your users login and admin login by hackers against bruteforce …

Zeshan Login 2FA

Up in the last 7 days:5,720#57,124

by zeshan4953 months ago

Add app-based two-factor authentication to your WordPress login. Scan a QR code, then enter a 6-digit code. Backup codes keep you from locking out.

SentriLog

Down in the last 7 days:6,589#57,333

by Rayhan Uddin1 month ago

Limit login attempts, hide your login URL, log every auth event, and get email alerts — a lightweight, privacy-first login security plugin.

MazeGuard Security

Up in the last 7 days:7,489#58,059

by designmazeus18 days ago

Two-factor login, malware and file-integrity scanning, and account security, with findings that say what to do next.

ProofShield

Down in the last 7 days:7,529#59,785

by Softwaregarten4 months ago

Block automated abuse on WordPress login, comments, and forms with privacy-friendly, self-hosted Proof-of-Work protection.

AI CyberGuard

Up in the last 7 days:11,027#61,297

by yosikrivo3 months ago

All-in-one AI-powered WordPress security: firewall, malware scanner, login protection, file integrity & safety snapshots — and more.

FP Site Security

Up in the last 7 days:3,390#62,148

by Joseph Mendez4 months ago

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

NeverLast Security Lite

#62,677

by neverlast16 days ago

Local-first WordPress security: bounded firewall, login controls, administrator TOTP, health checks, integrity evidence and activity logs.

Vyntic Guard

#62,798

by Vynatics2 months ago

Security plugin with malware scanning, brute-force protection, login security, IP blocking, activity logs, hardening, and custom login URLs.

GoUltra Auth

#63,385

by GoUltra.AI3 months ago

Add a one-time code sent over WhatsApp as a second factor for WordPress and WooCommerce logins, with recovery codes, rate limits and an audit log.

Puzzle Gate

#63,393

by wpsqr9 months ago

Stop bots in their tracks with a human-friendly puzzle CAPTCHA for WordPress logins.

HSArticle Login Warden

Up in the last 7 days:2,422#63,718

by hsarticle1 month ago

Hide your login URL and stop leaking your admin usernames. Custom login URL, XML-RPC lockdown, and enumeration blocking.

Techbox Login Security

Down in the last 7 days:10,615#63,843

by techboxdesign2 months ago

Stop brute-force attacks, bots, and password guessing on your WordPress login. Limit login attempts, block bad IPs, and secure wp-login fast.

Allimedia Login & Prefix Guard

#64,474

by Aleš Zita - Allimedia2 months ago

Protect the login URL and change the database prefix through a verified workflow with readiness checks and automatic rollback.

OrioleOne Master Guard

Up in the last 7 days:3,379#64,761

by OrioleOne1 month ago

All-in-one WordPress security with brute-force protection, hardening controls, and a clear failed login audit log.

Sergeev Studio Two-Factor Login

Down in the last 7 days:1,212#64,777

by sergeev.studio15 days ago

Two-factor login for WordPress with codes from an authenticator app or a Telegram bot, backup codes and required 2FA for chosen roles.

Jibong Purr-tection

Up in the last 7 days:890#65,338

by Aldrian Loyola17 days ago

Free, all-in-one WordPress security: firewall, malware scanner, two-factor login with passkeys, brute-force protection, live traffic and alerts.

Mrsea Login

#65,728

by mrsea2 months ago

Modern login design, a custom login URL, and optional authenticator two-factor protection with QR setup and recovery codes.

IC Security Guard

#66,168

by ITclan BD2 months ago

Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.

Xerotact SHIELD-X Security

Down in the last 7 days:5,358#66,536

by xerotact14 days ago

Shared-hosting security with WAF logging, opt-in enforcement, malware scanning, login protection, hardening, backups, and audit tools.

MisticGate

#66,690

by MistiCuantum3 days ago

MisticGate puts a gate in front of your login page without changing its URL. Without the gate only you know, reaching the login page is very hard.

Rooted Dev Studio Security Toolkit

Up in the last 7 days:2,059#67,013

by bigdawgdad21852 months ago

Practical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.

Aegis User Guard

#67,454

by Ahnaf0071 month ago

WordPress identity policies for password rules, login lockouts, two-factor authentication, IP controls, and Administrator oversight.

Dwarpal

#67,608

by Dwarpal2 days ago

Firewall, malware scan, login security, and SEO hack protection for WordPress.

LoginGlow

Down in the last 7 days:6,801#67,618

by Mehedi Hasan4 months ago

Customize and secure your WordPress login page — custom logos, backgrounds, colors, pre-built templates, a custom login URL, and login attempt limitin …

FortressX Security

Down in the last 7 days:6,802#67,629

by Fortressxtoday

FortressX Security helps protect WordPress with login protection, firewall tools, security checks, hardening guidance and file integrity monitoring.