Generic Login Error Message
Shows the same error for a wrong username and a wrong password, so the login form does not reveal which usernames exist.
WPIDE Team 6 installs
Snippet Library
Login snippets for WordPress
Snippets for the WordPress login page and the way people sign in: your logo and colors, a custom redirect after login, friendlier error messages and limits on who can get in. For anyone who wants a branded, safer login without another plugin.
"Log Out Other Devices" Button for Members
Adds a [wpide_logout_others] shortcode with a button that signs the member out of every other browser and device, keeping the current one logged in.
Allow Only Administrators to Log In
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Allow Only One Active Session per User
Logs a user out of every other browser and device as soon as they log in somewhere new, which stops account sharing.
Allow Some Roles to Log In Only During Office Hours
Lets users in chosen roles, such as shop managers or support staff, log in only on working days between set hours in the site's time zone.
Block Logins From Accounts Without a Role
Stops accounts that have no role on this site (often left over after a role was removed) from logging in, which closes a common gap on older sites.
Block Password Resets for Administrators
Disables the "Lost your password?" flow for administrator accounts, which closes off reset-email based takeovers of the most powerful accounts.
Disable Password Resets for Everyone
Turns off the "Lost your password?" feature for all users, for sites where accounts are managed only by an administrator.
Email Users When They Log In From a New Device
Sends members an email when their account is used from a browser and network it has not seen before, so they can react quickly if it was not them.
Emailed Login Code for Staff Accounts
Adds a second step for administrators and editors: after the correct password, WordPress emails a 6-digit code that must be entered to finish logging in.
Expire Passwords After 90 Days
Makes users in chosen roles reset their password once it is older than 90 days; at login they are told it has expired and pointed to the password reset form.
Hide the "Remember Me" Checkbox
Removes the Remember Me option so every login ends when the browser closes, which suits shared or public computers.
Lock Accounts That Haven't Been Used for Months
Blocks logins from accounts that have been inactive for a long time (180 days by default) until they reset their password, which protects forgotten accounts.
Log Out Idle Users Automatically
Logs users out after a set time without any mouse, keyboard or scroll activity, counted across all their open tabs.
Log Users Out Everywhere When Their Role Changes
Ends all of a user's active sessions as soon as an administrator changes or removes their role, so a demoted account cannot keep using old access.
Make New Users Change Their Password on First Login
When an administrator creates an account, the new user is sent to their profile and asked to choose a new password before they can use the rest of the site.
Password Reset by Email Address Only
Makes the "Lost your password?" form accept only an email address, not a username, so the form can't be used to probe which usernames exist.
Recent Login History on the Profile Screen
Records the last 10 logins for each user (time, IP address and browser) and lists them on their profile screen so they can spot logins they do not recognise.
Reject Login Attempts for Common Usernames
Refuses login attempts for usernames bots love to try, such as "admin", "administrator" or "root", before WordPress even checks a password.
Shorter Login Sessions for Administrators
Makes administrator logins expire sooner than everyone else's, limiting the damage of a forgotten logged-in browser.
Show Your Previous Login Time After Logging In
Greets users in the admin with the date, time and IP address of their previous login, so they can spot logins they do not recognize.