Allow Only Administrators to Log In
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Snippet Library
Snippets for the WordPress login page and the way people sign in: your logo and colors, a custom redirect after login, friendlier error messages and limits on who can get in. For anyone who wants a branded, safer login without another plugin.
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Disables the "Lost your password?" flow for administrator accounts, which closes off reset-email based takeovers of the most powerful accounts.
Renames the field labels and the button on the login screen, for example "Email" instead of "Username or Email Address" and "Sign in" instead of "Log In".
Sends members an email when their account is used from a browser and network it has not seen before, so they can react quickly if it was not them.
Adds a second step for administrators and editors: after the correct password, WordPress emails a 6-digit code that must be entered to finish logging in.
Shows "Please log in to view that page" above the login form when a visitor was redirected there from a members-only page, instead of a bare form.
Adds a short hint above the MemberPress login button with a link to reset the password, which cuts down on "I can't log in" emails.
Accepts only an email address and password on the login form. Usernames are rejected, which makes guessing logins harder.
Stops WordPress from accepting an email address in the login form, so only usernames work.
Logs users out right away from plain logout links (for example in menus) instead of showing "Do you really want to log out?".
Shows your own notice above the login form, for example to point customers to the shop account page or announce maintenance.
Makes the "Lost your password?" form accept only an email address, not a username, so the form can't be used to probe which usernames exist.
Adds an "Email me a login link" option to the login screen; members enter their email or username and get a one-time link that logs them in for 15 minutes.
Adds hint text inside the username, password and email fields on the login, lost password and registration screens.
When someone who is already logged in opens wp-login.php, they go straight to the dashboard (or the homepage for subscribers) instead of seeing the form again.
Sends visitors who open wp-login.php to your own login page (for example one with the login form shortcode), and back there when a login fails.