Melapress Login Security

COMPREHENSIVE WORDPRESS LOGIN SECURITY PLUGIN

Melapress Login Security enables you to effortlessly set login security policies that put you firmly in the driver’s seat of your WordPress sites. Policies are highly customizable and granular and can be implemented by user role or site-wide for complete control over the security of your WordPress login processes.

Use the free edition of Melapress Login Security to implement WordPress password requirements such as minimum length and complexity rules. The plugin also allows you to set password expiration policies, prevent password reuse, limit failed login attempts, and automatically disable inactive user accounts, among other things. This helps you:

• Prevent unauthorized login attempts
• Protect against brute force attacks
• Comply with GDPR with a login consent notice

🔐 Features list

A secure WordPress login starts right here. Explore all of the features included with the free edition of Melapress Login Security:

Set password policies

Strong passwords are your first line of defense against bad actors looking to gain access to your site. Set password requirement policies to make sure users set strong passwords. Set policies by user role or site-wide and define policy priority for users with multiple roles.

• Set minimum password length
• Require uppercase and lowercase characters, numbers, and special characters
• Set an automatic password expiration policy and advise users when their password is about to expire
• Disallow users from reusing passwords
• Provide users with helpful instructions during the password configuration stage
• Disable password reset links
• Mandate WordPress password reset on the first login

Limit login attempts

Limit failed login attempts and put an end to brute force attacks. Protect your login form by automatically disabling user accounts after a number of failed login attempts. Choose between manual unlocking by an admin or automatic unlocking after a cooldown period.

Temporary login without password

Provide temporary and secure login access to third parties, like developers, editors, employees or others, without a password. It works by providing the user with a temporary login link that expires after a certain amount of time, or after a number of uses. This prevents you from having to create new user accounts manually, while simultaneously reducing the security risks associated with old, unused user accounts.

Change WordPress login URL

Easily deploy security-by-obscurity tactics and change your WordPress login page URL using a plugin! Hiding the default login page from hackers makes it more difficult to find, potentially reducing brute force attacks and other unauthorized access attempts. After you change the default wp-admin URL, you can set a 404 for the old login page or redirect it to any page of your choosing.

Limit login page access by IP address(es)

Read the full description on the official page →