Loginizer is a robust WordPress plugin designed to fortify your website against brute force attacks and enhance its security measures. Here’s a breakdown of its features:
Free Features:
- Brute Force Protection: Automatically blocks IPs for a specified duration after a defined number of failed login attempts.
- Failed Login Attempts Logs: Keeps a record of failed login attempts.
- Blacklist IPs: Blocks specific IPs from accessing your site.
- Whitelist IPs: Allows specific IPs to access your site.
- Custom Error Messages: Provides customizable error messages on failed login attempts.
- Permission Check: Verifies the permissions of crucial files and folders.
Pro Features:
- MD5 Checksum: Allows the admin to check and ignore core WordPress files.
- Passwordless Login: Enables login through a temporary link sent to the user’s email after entering their username/email.
- Two Factor Authentication (2FA):
- Via Email: Sends a temporary 6-digit code to the user’s email for login authentication.
- Via App: Users can configure 2FA using authenticator apps like Google Authenticator.
- Login Challenge Question: Adds a security layer by requiring users to answer a preset challenge question after login.
- reCAPTCHA: Integration with Google’s reCAPTCHA v3/v2 to prevent automated brute force attacks.
- Login Page Renaming: Allows renaming of login URLs and WP-admin URLs to prevent automated attacks.
- CSRF Protection: Updates the admin URL with a session string to prevent CSRF attacks.
- Disable XML-RPC: Option to disable XML-RPC in WordPress to prevent brute force attacks.
- Username Auto Blacklist: Automatically blacklists IPs using common usernames like admin or variations of domain/business names.
- New Registration Domain Blacklist: Enables banning new registrations from specific domains.
- Change Admin Username: Allows renaming the admin username.
- Auto Blacklist IPs: Auto blacklists IPs using certain usernames saved by the admin.
- Disable Pingbacks: Simple way to disable PingBacks.
- SSO (Single Sign-On): Enables users to access the WordPress Dashboard without sharing usernames/passwords.
- Limit Concurrent Logins: Prevents simultaneous logins from different devices.
Additionally, Loginizer is licensed under LGPLv2.1, ensuring a safe and secure environment for your WordPress website.