Description
GhostLock Hide Login is a lightweight WordPress security plugin that combines login URL protection and automatic brute-force attack prevention in a single plugin.
Unlike many security plugins that require manual configuration, GhostLock Hide Login starts protecting your website immediately after activation.
Features:
- Hide wp-login.php
- Protect wp-admin access
- Change the default WordPress login URL
- Automatic brute-force attack protection
- Automatically block suspicious IP addresses
- Detect attacker countries
- Security activity logs
- Whitelist trusted IP addresses
- Redirect attackers to custom 404 pages
- Show custom blocked access pages
- Lightweight and easy to use
- No complex configuration required
GhostLock Hide Login helps reduce unauthorized login attempts and improves WordPress website security with minimal setup.
Privacy
GhostLock Hide Login uses the third-party service ipwho.is (ipwhois.io) to detect attacker countries.
Data Sent:
– Visitor IP address
Purpose:
– Country detection for security monitoring and attack logging
Service URL:
https://ipwhois.io/
Terms of Service:
https://ipwhois.io/terms
Installation
Install from WordPress Admin Dashboard
- Go to Plugins Add New in your WordPress admin dashboard.
- Click Upload Plugin.
- Upload the
ghost-hide-login.zipfile. - Click Install Now.
- Activate the plugin through the Plugins screen.
- Go to Settings GhostLock Hide Login.
- Configure your custom login URL and security settings.
Manual Installation
- Upload the plugin files to the
/wp-content/plugins/ghost-hide-logindirectory. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings GhostLock Hide Login.
- Configure your plugin settings.
FAQ
-
Will this hide wp-login.php?
-
Yes. Direct access to wp-login.php and wp-admin can be restricted and protected using your custom login URL.
-
Does the plugin automatically protect against brute-force attacks?
-
Yes. GhostLock Hide Login automatically limits suspicious login attempts and blocks malicious IP addresses after activation without additional setup.
-
Can I unblock IPs manually?
-
Yes. You can manage and remove blocked IP addresses from the plugin settings page.
-
Does this plugin use third-party services?
-
Yes. Country detection uses the ipwho.is (ipwhois.io) service over HTTPS. Results are cached for 24 hours per IP address.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“GhostLock Hide Login” is open source software. The following people have contributed to this plugin.
Contributors
Translate “GhostLock Hide Login” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.4
- Fix Plugin Check warnings by prefixing local variables in the admin settings page.
- Shorten the readme short description to the WordPress 150-character limit.
1.0.3
- Stop trusting spoofable forwarding headers for client IP detection.
- Use REMOTE_ADDR by default for brute-force and country-cache keys.
- Add the
ghost_login_client_ipfilter for trusted reverse-proxy integrations.
1.0.1
- Initial release
- Hide wp-login.php
- Protect wp-admin
- Custom login URL support
- Automatic brute-force protection
- Automatic IP blocking
- Country detection
- Security logs
- IP whitelist
- Custom 404 redirect page
- Custom blocked page support