Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
Alternatives to XML-RPC Settings
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Lightweight login protection, brute-force defence and safer admin access controls for WordPress.
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
Free, offline-first WordPress security hardening with 15 configurable protection modules and a 20-point local security scan.
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
Free brute-force login protection and XML-RPC blocking, plus an optional bot firewall backed by the live ZeroBot threat network.
Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.
Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.