Counts failed logins and locks out the address that keeps guessing, with a log of what was tried and a longer lockout each time.
Alternatives to Prevent Brute Force Login
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
DadsFam Login Securityv3.1.1
Stops brute-force attacks with its own self-learning Brain that knows your real people, locks bots out fast and fixes its own setup.
Login Delay Shieldv2.7.0
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
Phantom User Lockoutv1.2.0
Records logins that use usernames which don't exist (username, password tried, IP, location, host) and blocks the IP until you unblock it.
WordPress login security: limit login attempts, lock out brute-force IPs, and verify new devices with a stop password, trusted devices & alerts.
Block brute-force login attempts by integrating with Cloudflare's firewall to automatically block IPs after failed logins.
IC Security Guardv1.3.0
Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.
MyFast Login Guard renames your login page, blocks brute-force attempts, and lets you inspect your full server environment — all from one lightweight …
Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.
BruteFort - Rate Limit, Custom Login URL, Geo Blocking & IP Restriction for complete WordPress login security.