Generic Login Error Message
Shows the same error for a wrong username and a wrong password, so the login form does not reveal which usernames exist.
Snippet Library
Snippets for the WordPress login page and the way people sign in: your logo and colors, a custom redirect after login, friendlier error messages and limits on who can get in. For anyone who wants a branded, safer login without another plugin.
Shows the same error for a wrong username and a wrong password, so the login form does not reveal which usernames exist.
Disables the "Lost your password?" flow for administrator accounts, which closes off reset-email based takeovers of the most powerful accounts.
Turns off the "Lost your password?" feature for all users, for sites where accounts are managed only by an administrator.
Adds a second step for administrators and editors: after the correct password, WordPress emails a 6-digit code that must be entered to finish logging in.
Makes users in chosen roles reset their password once it is older than 90 days; at login they are told it has expired and pointed to the password reset form.
Adds a short hint above the MemberPress login button with a link to reset the password, which cuts down on "I can't log in" emails.
Removes the "Go to site", "Lost your password?" and privacy policy links from the login screen, each one switchable on its own.
Blocks logins from accounts that have been inactive for a long time (180 days by default) until they reset their password, which protects forgotten accounts.
Accepts only an email address and password on the login form. Usernames are rejected, which makes guessing logins harder.
Adds a [wpide_lost_password] shortcode with a "reset your password" form and points WordPress's "Lost your password?" links to the page that holds it.
When an administrator creates an account, the new user is sent to their profile and asked to choose a new password before they can use the rest of the site.
Makes the "Lost your password?" form accept only an email address, not a username, so the form can't be used to probe which usernames exist.
Adds an "Email me a login link" option to the login screen; members enter their email or username and get a one-time link that logs them in for 15 minutes.
Adds hint text inside the username, password and email fields on the login, lost password and registration screens.
Refuses login attempts for usernames bots love to try, such as "admin", "administrator" or "root", before WordPress even checks a password.
Stops the login, lost password and registration screens from putting the cursor in the first field as soon as they load, so the page does not jump or pop up the on-screen keyboard.
Stops the login box from shaking after a wrong password, for a calmer login screen.