The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Limit Login Attempts
Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
The facts
- Rating
- 3.9★ from 7
- Active installs
- 200+
- Price
- Free
- Last updated
- 15 Jun 2025
- Added
- Feb 2020
- Requires WP
- 4.6
- Tested up to
- WP 6.8.8
- Requires PHP
- 7.2
- Downloads
- 14,464
Our analysis
AI-assistedLimit Login Attempts is a WordPress plugin designed to enhance site security by restricting the number of login attempts. It blocks an IP address from making further attempts after a specified limit is reached, making brute-force attacks more difficult. The plugin includes features such as email notifications for blocked attempts, configurable lockout timings, and IP whitelisting/blocklisting.
This plugin is suitable for WordPress site owners who want to protect their login pages from unauthorized access and improve overall security. It is compatible with WooCommerce and offers additional features for advanced users in its PRO version.
Best for: WordPress site owners looking to improve login security.
What it does well
- ✓Limits login attempts to enhance security
- ✓Configurable lockout timings
- ✓Email notifications for blocked attempts
- ✓IP whitelisting and blocklisting support
- ✓Compatible with WooCommerce
Where it falls short
- •Basic features only available in the free version
- •Advanced features require a PRO upgrade
- •Limited information on user experience and support
Verdict
Limit Login Attempts provides essential security features to protect against brute-force attacks. It is a practical choice for those prioritising login security on their WordPress sites.
From the developer
wp-buy's own description of Limit Login Attempts, lightly tidied.
Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Basic Features
- Limit the number of retry attempts when logging in.
- Configurable lockout timings.
- Email notification of blocked attempts (Detailed email containing all necessary information).
- Notify the user of remaining attempts.
- Report containing all blocked attempts.
- Whitelist/Blocklist of IPs (Support IP ranges).
- Allow/Block Countries.
- Automatically block IP addresses that exceed limit login attempts
- Automatically add IP addresses that exceed blocks limit to the deny list
- Send notifications about blocked retry (Email sent to admins)
- Inform the user about the remaining retries or lockout time on the login page.
- Unlock The Locked users – Easily unlock the locked admin through the email or dashboard.
- Limit the number of retry attempts when logging in per IP.
- Limit the number of attempts to log in using cookies.
- Optional logging and optional email notification.
- Compatible with Google captcha, Captcha Plus & reCaptcha.
- Dashboard gives you an overview of your site’s security.
- Enable or disable the plugin functionality
- Enable to disable email notifications
- Compatible with latest WordPress version
- Woocommerce login page protection.
- Wordfence & Sucuri compatibility.
- GDPR compliant.
Advanced Features (PRO)
- All Basic features included.
- Save the password that was used by the hacker (Save part of the password and hide the last three digits).
- Advanced dashboard gives you an overview of your site’s security (Charts for the most important reports).
- Block attackers by IP, Country, IP range.
- Mobile Application for the admins to follow up the site security (Download APK).
Video Description
Plugin Settings and Reports
Tagged as
quality
Security
Alternatives
Other plugins for stopping spam.
Allows administrators to globally disable comments on their site. Comments can be disabled according to post t...
Free
1M+ installs 4.7★ (280)
Antispam Bee
92Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protect...
Free
700k+ installs 4.8★ (226)
Top-rated antispam for contact forms, comments, WooCommerce, eCommerce, and login. No CAPTCHAs, no friction, j...
Free
200k+ installs 4.8★ (3,208)
Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1
Free
200k+ installs 5★ (89)
Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.
Free
200k+ installs 4.8★ (430)