Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Limit Attempts by BestWebSoft
Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.
The facts
- Rating
- 4.6★ from 37
- Active installs
- 4k+
- Price
- Free
- Last updated
- 9 Jan 2026
- Added
- Jul 2014
- Requires WP
- 6.2
- Tested up to
- WP 6.8.8
- Downloads
- 193,798
Our analysis
AI-assistedLimit Attempts by BestWebSoft is a WordPress security plugin designed to protect your site from brute-force attacks and bot logins. It limits the number of failed login attempts per user and can block IP addresses for a configurable time period based on your settings. The plugin also allows you to manage deny and allow lists, receive email alerts, and hide forms from blocked users.
This plugin is suitable for WordPress site owners looking to enhance their security without needing coding skills. It includes features for automatic blocking of IP addresses, manual list management, and detailed logging of login attempts, making it a practical choice for those concerned about unauthorized access.
Best for: WordPress site owners seeking to improve their site's security against automated attacks.
What it does well
- ✓Automatically blocks IP addresses after exceeding login attempts
- ✓Allows management of deny and allow lists
- ✓Sends email alerts for failed login attempts
- ✓Includes detailed logging of login events
- ✓Compatible with other BestWebSoft security tools
Where it falls short
- •Limited information on advanced features without a pro version
- •No specific details on support options or response times
Verdict
Limit Attempts provides essential security features for WordPress users concerned about brute-force attacks. It offers a straightforward solution for managing login security.
From the developer
bestwebsoft's own description of Limit Attempts by BestWebSoft, lightly tidied.
Limit Attempts is a powerful WordPress security plugin that protects your site from brute-force attacks and bot logins. It limits the number of failed login attempts per user and blocks IP addresses for a configurable time period based on your settings.
You can manage deny and allow lists, receive email alerts, and hide login or contact forms from blocked users. This plugin offers seamless protection without the need for coding and is compatible with other BestWebSoft security tools.
Shield your site against automated attacks and unauthorized access today.
Free Features
- Automatically block IP addresses after exceeding allowed login attempts
- Add IPs that exceed block limit to deny list automatically
- Manually add IP addresses to:
- Deny list
- Allow list
- Set email sending interval
- Set number of emails allowed per interval
- IP address
- Failed attempts
- Block count
- Status
- Failed login
- Blocked users
- Denylisted users
- User email
- Custom email
Pro Features
All Free features included, plus:
- Add IP ranges and masks to deny/allow list
- Block IPs by country using GeoIP database
- Deny or allow access by email address or domain
- Control total failed attempts before block
- Manage deny/allow lists with:
- Country
- IP range
- Reason
- Compatible with:
- Configure rules for non-existent usernames:
- Use standard block settings
- Immediate IP block
- Immediate deny list
- Log tab includes:
- IP address
- Username
- Password
- Hostname
- Event type
- Form source
- Timestamp
- Login statistics and brute-force attempts chart in settings and dashboard widget
- Multisite network settings support
- Use plugin’s captcha on default forms
- Priority support within 1 business day (Support Policy)
Got a feature request? We want to hear it: Suggest a Feature
Documentation & Videos
Help & Support
Need help? Visit our Help Center – https://support.bestwebsoft.com/
Translation
Tagged as
industry
Knowledge Base & Documentation
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)