Bots hit WordPress login pages all day. Security locks out IP addresses after repeated failed logins, lets you set password requirements, and can disable wp-login.php so every login goes through your Theme My Login pages.
Features
- Lock out an IP after a set number of failed logins within a set time
- Lockouts last from 5 minutes to 1 day
- Optionally lock out unknown usernames right away
- Lock and unlock individual accounts, one at a time or in bulk
- Disable wp-login.php without breaking password-protected posts or session re-login
- Password rules: minimum length, lowercase letters, capital letters, numbers, special characters
- Rules apply at registration, password reset and profile updates