WPEPP

WPEPP best for Best Essential security, password protected content, block AI crawlers, limit login attempts, country restriction, CPU monitor & login customizer with live preview. Total site protection! WPEPP is the all-in-one WordPress essential security and login page customizer plugin. It combines everything you need to limit login attempts, block brute force attacks, hide the login page, password protect content, restrict by country, and customize the WordPress login page — all from a single, modern dashboard with real-time live preview.

Stop installing five separate plugins. WPEPP replaces your login limiter, login page customizer, password form styler, content restriction plugin, country blocker, and AI crawler blocker with one lightweight solution that loads zero external scripts on the front end.

View Details | View Pricing

🔐 Limit Login Attempts & Brute Force Protection

Protect your WordPress login form from brute force attacks with built-in login attempt limiting and IP-based lockouts.

• Login Attempt Limiter — automatically block IP addresses after repeated failed login attempts
• Configurable lockout — set the maximum number of failed attempts and lockout duration in minutes
• Login Honeypot — invisible bot trap field catches automated brute force login attacks instantly
• Registration Honeypot — hidden spam trap on the WordPress registration form blocks fake signups
• Registration Rate Limiter — prevent mass registration spam with per-IP rate limiting
• IP-based tracking — every failed login is tracked by IP address for accurate blocking

🛡️ Hide Login Page & Custom Login URL (Pro)

Move your default WordPress login page to a secret URL so bots and attackers can never find it.

• Custom Login URL — change wp-login.php to any URL you choose (e.g., /my-secret-login)
• Hide Default Login — the original wp-login.php returns a 404, invisible to attackers
• After-Login Redirect — send users to a specific page after successful login
• Auto-Login Links — generate secure one-time login tokens for specific users

🔑 Two-Factor Authentication – 2FA (Pro)

Add an extra layer of security to every WordPress login with TOTP-based two-factor authentication.

• Authenticator App Support — works with Google Authenticator, Authy, Microsoft Authenticator, and any TOTP app
• QR Code Setup — users scan a QR code to set up 2FA in seconds
• Recovery Codes — 8 one-time backup codes in case a user loses their authenticator device
• Role-Based Enforcement — enable 2FA for specific user roles (administrators, editors, etc.)
• RFC 6238 Compliant — industry-standard time-based one-time password implementation

🤖 Google reCAPTCHA Integration (Pro)

Add Google reCAPTCHA to your login and registration forms to stop bots before they even try.

• Login Form reCAPTCHA — prevent automated login attempts with CAPTCHA verification
• Registration Form reCAPTCHA — block bot signups on the WordPress registration page
• Easy Setup — just enter your Site Key and Secret Key to activate

📊 Login Activity Log (Pro)

Read the full description on the official page →