Block Logins From Accounts Without a Role
Stops accounts that have no role on this site (often left over after a role was removed) from logging in, which closes a common gap on older sites.
Snippet Library
Login snippets for WordPress
Snippets for the WordPress login page and the way people sign in: your logo and colors, a custom redirect after login, friendlier error messages and limits on who can get in. For anyone who wants a branded, safer login without another plugin.
Block Password Resets for Administrators
Disables the "Lost your password?" flow for administrator accounts, which closes off reset-email based takeovers of the most powerful accounts.
Disable Password Resets for Everyone
Turns off the "Lost your password?" feature for all users, for sites where accounts are managed only by an administrator.
Emailed Login Code for Staff Accounts
Adds a second step for administrators and editors: after the correct password, WordPress emails a 6-digit code that must be entered to finish logging in.
Lock Accounts That Haven't Been Used for Months
Blocks logins from accounts that have been inactive for a long time (180 days by default) until they reset their password, which protects forgotten accounts.