WordPress.org

WP Login Security provides enhanced security for blog administrators by requiring administrators to register or whitelist their IP address.
If the IP address is not recognized, the plugin will send an email to the blog administrator with a link that contains a one-time key.

What does this Plugin do?

1. Each time a user logs in, the plugin will compare their existing IP address to the last seen IP address.
2. If the IP does not match or no IP addresses have been whitelisted, an email will be sent to the users registered email address.
3. The user must login to their email and click the included link, which contains the one-time password. Note: passwords expire after
4. The plugin can be configured to also send an email to the blog administrator as well as the user.

Upcoming Features

1. Ability to update whitelist from within admin interface.
2. Custom set expiry time for one-time key
3. Admin activity audit/access log