About this plugin
Login Guard is a powerful, privacy-first login security plugin that runs entirely on your own server — no cloud service, no external API calls, no telemetry.
Core Features
Two-Factor Authentication (TOTP)
Every user can protect their account with an authenticator app (Google Authenticator, Authy, 1Password, and any other standard TOTP app). Setup from the user profile page with a manual entry key, 10 single-use backup codes for when a device is lost, and an optional site-wide setting to require 2FA for Administrators.
Brute-Force Protection
Automatically detects repeated failed login attempts from the same IP address. When a configurable threshold is reached, the IP is locked out and can be automatically added to the block list.
Live Login Activity Log
Every login attempt — successful, failed, or blocked — is recorded with IP address, username, user agent, and timestamp. Full filter, paginate, and export to CSV.
IP Block List
Manually block specific IP addresses, with permanent or time-limited expiry. Auto-blocked IPs are automatically pruned when their lockout period ends.
IP Allow List
Protect your own IP or your developer’s IP from ever being blocked — even during testing.
Instant Email Alerts
Get notified when a suspicious number of failed attempts is detected from a single IP, or when a successful login occurs from a new location for any user.
Dashboard Overview
At-a-glance stats with a 7-day bar chart (no external chart libraries), auto-refreshed every 30 seconds.
WP Admin Dashboard Widget
Quick stats and last 5 login attempts visible from the main WordPress dashboard.
Privacy
Login Guard stores IP addresses and usernames in your own database. No data leaves your server.
Free, Forever
No upsells, no premium tier, no usage limits. Login Guard is completely free.
❤️ Dedicated in loving memory of Maa — 18 May.