Generic Login Error Message
Shows the same error for a wrong username and a wrong password, so the login form does not reveal which usernames exist.
WPIDE Team 6 installs
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Limit Failed Login Attempts
Temporarily blocks an IP address after 5 failed logins within 15 minutes. A lightweight brute-force guard with no settings screen.
WPIDE Team 6 installs"Log Out Everyone" Button for Emergencies
Adds a button under Tools > Log Out Everyone that ends every login session on the site except your own, useful after a suspected break-in or a staff change.
"Welcome Back" Message After Logging In
Shows a small, dismissible "Welcome back, Sam!" notice on the front of the site right after a member logs in.
Accept Application Passwords Only From Trusted IP Addresses
Rejects REST API and XML-RPC logins made with application passwords unless they come from the IP addresses or networks you list, such as your office, CI server or integration partner.
Active Login Sessions Overview
Adds Users > Active Sessions, listing everyone who is currently logged in with their login time, IP address and browser, and lets you end a user's sessions with one click.
Activity Log in Its Own Database Table
Records logins, failed logins, content changes, plugin, theme and user changes and edits to key settings in a dedicated database table, with a searchable, paginated log under Tools > Activity Log and automatic cleanup.
Allow Administrator Logins Only From Trusted IPs
Administrators can only log in from the IP addresses or ranges you list; everyone else logs in as usual.
Allow Only Administrators to Log In
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Allow Only One Active Session per User
Logs a user out of every other browser and device as soon as they log in somewhere new, which stops account sharing.
Allow Some Roles to Log In Only During Office Hours
Lets users in chosen roles, such as shop managers or support staff, log in only on working days between set hours in the site's time zone.
Ask for the Password Again Before Sensitive Admin Screens
Requires administrators to log in again before opening plugin, theme, user and update screens when their login is older than 30 minutes, so a hijacked session cannot quietly install code or add users.
Ban IPs That Try Common Attack Usernames
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Block Login Attempts From Scripts and Command-Line Tools
Refuses login, password reset and registration requests sent by tools such as curl, wget, python-requests or empty user agents, which real browsers never use and brute-force scripts often do.
Block Logins From Accounts Without a Role
Stops accounts that have no role on this site (often left over after a role was removed) from logging in, which closes a common gap on older sites.
Brand Colors on the Login Page
Restyles the login screen with your own background, button and link colors.
BuddyPress: Members-Only Community Pages
Sends logged-out visitors who open BuddyPress pages (members, profiles, activity, groups) to the login screen, so the community is visible to members only.
BuddyPress: Send Members to Their Profile After Login
Sends members to their own BuddyPress profile (or activity stream) after logging in, instead of the WordPress dashboard.
Change Login Form Labels and Button Text
Renames the field labels and the button on the login screen, for example "Email" instead of "Username or Email Address" and "Sign in" instead of "Log In".
Change the Login Page Browser Title
Sets the browser tab title of the login screens to "Log In | Your Site" instead of the WordPress default.
Check "Remember Me" by Default
Pre-ticks the "Remember Me" box on the login form so users stay logged in longer without having to remember to tick it.
Custom Welcome Email Text for New Network Sites
Replaces the network's welcome email for new sites with your own wording while keeping the site address, login and dashboard links filled in.
Custom Welcome Email for New Users
Rewrites the email new users receive with their login details, using your own subject and greeting while keeping the secure link to set a password.
Daily Email Summary of Failed Logins
Counts failed login attempts during the day (per username and IP address) and emails the administrator a short summary each morning, so you notice brute-force attacks without a flood of alerts.