Generic Login Error Message
Shows the same error for a wrong username and a wrong password, so the login form does not reveal which usernames exist.
Snippet Library
Snippets for the WordPress login page and the way people sign in: your logo and colors, a custom redirect after login, friendlier error messages and limits on who can get in. For anyone who wants a branded, safer login without another plugin.
Shows the same error for a wrong username and a wrong password, so the login form does not reveal which usernames exist.
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Renames the field labels and the button on the login screen, for example "Email" instead of "Username or Email Address" and "Sign in" instead of "Log In".
Pre-ticks the "Remember Me" box on the login form so users stay logged in longer without having to remember to tick it.
Makes users in chosen roles reset their password once it is older than 90 days; at login they are told it has expired and pointed to the password reset form.
Shows "Please log in to view that page" above the login form when a visitor was redirected there from a members-only page, instead of a bare form.
Adds a row of links under the login box, such as Contact, Help or Terms of Use.
Adds a short hint above the MemberPress login button with a link to reset the password, which cuts down on "I can't log in" emails.
Removes the Remember Me option so every login ends when the browser closes, which suits shared or public computers.
Removes the language dropdown below the login form on sites that have extra languages installed.
Extends the login cookie to 30 days when "Remember Me" is ticked. Sessions without it keep the normal two-day lifetime.
Shows a small "Log in or create an account" box halfway through articles for visitors who are not logged in.
Logs users out right away from plain logout links (for example in menus) instead of showing "Do you really want to log out?".
Shows your own notice above the login form, for example to point customers to the shop account page or announce maintenance.
Makes the "Lost your password?" form accept only an email address, not a username, so the form can't be used to probe which usernames exist.
Adds hint text inside the username, password and email fields on the login, lost password and registration screens.
When someone who is already logged in opens wp-login.php, they go straight to the dashboard (or the homepage for subscribers) instead of seeing the form again.
Makes administrator logins expire sooner than everyone else's, limiting the damage of a forgotten logged-in browser.
Stops the login, lost password and registration screens from putting the cursor in the first field as soon as they load, so the page does not jump or pop up the on-screen keyboard.
Stops the login box from shaking after a wrong password, for a calmer login screen.
Sends visitors who open wp-login.php to your own login page (for example one with the login form shortcode), and back there when a login fails.