LoginDash

Description

Design a branded WordPress login page in a live, side-by-side customizer: logo, backgrounds, video, fonts, reCAPTCHA and more. No code needed.

🎨 A Visual Login Page Customizer For WordPress

LoginDash replaces the plain, generic wp-login.php screen with a fully branded sign-in experience — your logo, colours, backgrounds, fonts and messaging — all from a live, side-by-side editor that requires no code.

Adjust a control on the left and watch the real login page update instantly on the right. Everything is rendered with native WordPress markup, loads only on the login page, and leaves WordPress authentication working exactly as WordPress intends.

It’s built for agencies, freelancers and site owners who want a professional, on-brand login screen for clients, members and staff — in minutes, not hours.

✨ Why Choose LoginDash?

• True Live Preview — Most changes repaint instantly through CSS variables. No page reloads, no guesswork.
• No Code Required — Every colour, size, border and position has a visual control, each with its own per-field reset arrow.
• Lightweight by Design — Styles, fonts and scripts load only on the login page, never on your front end or admin. Generated CSS is cached and rebuilt only when you save.
• Safe to Experiment — Nothing goes live until you click Save Changes, and form submission is disabled inside the preview.
• Non-Destructive Themes — Applying a starter theme overwrites only the settings it defines. Your other customizations survive.
• Core-Compatible — Native WordPress markup and hooks. Translation-ready, multisite-aware and PHP 8+ ready.

🖼️ Features at a Glance

• Starter Themes — Three one-click starting designs: Clean WordPress Style (the default), Minimal Light and Minimal Dark. Apply one, then fine-tune every value.

• Logo & Page Identity — Upload a custom logo (recommended 320×80), set its width, height and spacing, link URL and alt title, change the browser page <title>, and add a custom favicon. Or hide the logo entirely.

• Backgrounds — Choose a solid colour, separate desktop and mobile background images with repeat / position / size controls, a random image gallery that picks a new image on every page load, or a background video (Media Library MP4 with optional start/end times, or YouTube) with an overlay tint for readability.

• Form Position — Place the login form anywhere on screen: Top / Center / Bottom and Left / Center / Right, plus four-side offsets for fine-tuning. The forgot-password form has its own independent position.

• Login Form Styling — Width (200–800 px), minimum height, corner radius, shadow size and opacity, four-side padding, border, background colour or image, and a transparency toggle.

• Input Fields & Labels — Field background and focus background, text colour, default and focus borders, radius, password-eye icon colour, remember-me checkbox colour, and label colours and sizes.

• Button Styling — Button colour and hover colour, borders, text colours, radius, padding and text size. Choose Default (inline beside Remember Me) or Full width mode with its own width and alignment.

• Forgot Password Form — Its own background image and colour, its own input radius, and its own position.

• Typography (Google Fonts) — A curated list including Inter, Roboto, Open Sans, Lato, Montserrat, Poppins, Nunito, Raleway and Playfair Display, with weights from 300 to 800. Choosing “System Default” loads no external font.

• Footer Links & Copyright Bar — Toggle the Lost-password, Back-to-site and Privacy-policy links, set custom text and URLs, style them together, and add a copyright bar that supports a $YEAR$ token.

• Welcome & Error Messages — Custom welcome messages for the Login, Lost-password, Registration and Logout screens (limited HTML allowed), custom text for eleven validation errors, and separate styling for welcome and error notices.

• Custom CSS / JS — Syntax-highlighted CSS and JavaScript editors for anything the controls don’t cover. Code is sanitised on save and loaded only on the login page.

• Google reCAPTCHA v2 & v3 — Protect the login, registration and lost-password forms from bots.

• Safe SVG Logos — SVG uploads are sanitized automatically, stripping scripts, event handlers and javascript: URIs.

🖥️ How the Customizer Works

1. Open LoginDash → Customizer.
2. Optionally pick a starting design on the Themes tab.
3. Open any panel and adjust the controls. The preview updates as you go.
4. Check your design with the Desktop / Tablet / Mobile buttons, and switch the preview between the login and forgot-password forms.
5. Click Save Changes to publish, or Reset to return everything to defaults.

Controls are grouped into tabs: Themes, Logo, Background, Form Position, Login Form, Forgot Password Form, Button Beauty, Input Labels, Google Fonts, Error Messages, Welcome Messages, Form Footer, reCAPTCHA and Custom CSS / JS.

The Settings screen is your control hub. It shows the live status of each feature with a link to where it’s configured, plus maintenance tools such as clearing the compiled-CSS cache.

🛡️ Built-in reCAPTCHA Protection

• reCAPTCHA v2 shows the familiar “I’m not a robot” checkbox.
• reCAPTCHA v3 runs invisibly and scores each request against Google’s recommended 0.5 threshold.
• Verification runs server-side. If it fails, the sign-in, registration or password reset is blocked and your custom error message is shown.
• If Google is temporarily unreachable, LoginDash lets the request through instead of locking everyone out.
• Your Secret Key is stored in a masked field and is only ever sent to Google’s verification endpoint, never exposed in the page.

💡 Best For

• Agencies delivering white-labelled, client-branded login screens.
• Membership, e-learning and WooCommerce sites that want the login page to match the storefront.
• Corporate intranets and staff portals that need a consistent brand at sign-in.
• Any site owner who wants a professional login page without touching code.

⭐ Do More With LoginDash Pro

The free plugin is a complete login-page customizer on its own. LoginDash Pro is an optional add-on that installs alongside it and adds a premium template library plus login, security and workflow features:

Design

• 9 Pre-built Designed Templates — Agency Style, Corporate Blue, Developer Console, Elegant Blur, Gradient Pro, Modern Glassmorphism, Neon Dark, SaaS Style and Split Screen, added to the same Themes grid as the free starters.

Security

• Limit Login Attempts — Lock out an IP after a configurable number of failed sign-ins, show a “remaining attempts” message, and keep an audit log that records password length only, never the password itself.
• IP Whitelist / Blacklist — Exempt trusted IPs from lockouts and block known-bad IPs immediately (IPv4 and IPv6).
• XML-RPC Protection — Block /xmlrpc.php, pingbacks and remote-publishing requests.
• CAPTCHA Escalation — Show reCAPTCHA only after an IP starts failing, so legitimate users sign in without friction.
• Hide Login — Move wp-login.php to a secret custom URL and redirect, 404 or reroute logged-out visits to the old endpoints.

Workflow

• Auto Login — Generate secure, passwordless login links: one-time, time-limited or never-expiring, stored as SHA-256 hashes, with an activity log.
• Login Redirects — Send users to different destinations after login and logout, by individual user or by role.
• Social Login — Sign in or register with Google, Facebook, X (Twitter) or GitHub. Administrator accounts can never be auto-linked.
• Import / Export — Back up, restore and migrate your full configuration (including uploaded media) between sites, with a 7-day roll back.

Learn more about LoginDash Pro: https://apps.spinxdigital.com

External Services

LoginDash optionally connects to the following external services. All connections are triggered only by explicit administrator configuration — nothing is sent by default on a fresh install.

Google reCAPTCHA

When the reCAPTCHA feature is enabled in the plugin settings, LoginDash loads the Google reCAPTCHA JavaScript library from Google’s servers and sends a server-side verification request to Google on each login, lost-password, or registration form submission.

• What is sent: The reCAPTCHA response token generated in the user’s browser, the site’s reCAPTCHA secret key, and the submitting user’s IP address.
• What is received: A pass/fail verdict (and a bot-likelihood score for v3).
• When it applies: Only when an administrator enables reCAPTCHA and configures a Google site key and secret key.
• Why it is required: Bot detection cannot be performed locally; the verification depends on Google’s infrastructure.
• Google reCAPTCHA Privacy Policy: https://policies.google.com/privacy
• Google reCAPTCHA Terms of Service: https://policies.google.com/terms

Google Fonts

When an administrator selects a Google Font in the Typography settings, LoginDash loads that font’s CSS stylesheet from Google Fonts on the login page.

• What is sent: The selected font family name and weight, as URL parameters.
• What is received: A CSS stylesheet pointing to the font files hosted by Google.
• When it applies: Only when an administrator selects a Google Font. If no font is selected, no request is made.
• Why it is required: Google Fonts are hosted on Google’s CDN; local self-hosting would require bundling hundreds of font files.
• Google Fonts Privacy Policy: https://policies.google.com/privacy

YouTube (background video)

When an administrator enables a YouTube video as the login page background, LoginDash embeds the video in an <iframe> pointing to youtube-nocookie.com.

• What is sent: The YouTube video ID, as part of the URL.
• What is received: The video player and stream.
• When it applies: Only when an administrator enables the background video feature and provides a YouTube URL.
• Why it is required: Video streaming must originate from YouTube’s CDN; the video file is not downloaded or bundled locally.
• Note: LoginDash uses the youtube-nocookie.com domain, which is YouTube’s privacy-enhanced mode and does not set cookies until the user plays the video.
• YouTube Privacy Policy: https://policies.google.com/privacy
• YouTube Terms of Service: https://www.youtube.com/t/terms