Title: Mokomaro Login Guard Lite Author: mokomaro Published: October 25, 2026 Last modified: October 25, 2026 --- Search plugins ![](https://ps.w.org/mokomaro-login-guard-lite/assets/banner-772x250.png?rev=3764767) ![](https://ps.w.org/mokomaro-login-guard-lite/assets/icon-256x256.png?rev=3764767) # Mokomaro Login Guard Lite By [mokomaro](https://profiles.wordpress.org/mokomaro/) [Download](https://downloads.wordpress.org/plugin/mokomaro-login-guard-lite.1.0.1.zip) * [Details](https://wordpress.org/plugins/mokomaro-login-guard-lite/#description) * [Reviews](https://wordpress.org/plugins/mokomaro-login-guard-lite/#reviews) * [Installation](https://wordpress.org/plugins/mokomaro-login-guard-lite/#installation) * [Development](https://wordpress.org/plugins/mokomaro-login-guard-lite/#developers) [Support](https://wordpress.org/support/plugin/mokomaro-login-guard-lite/) ## Description Mokomaro Login Guard Lite temporarily restricts password logins after five failed attempts from the same connection address within a fixed 15-minute window. Restrictions last 15 minutes. Successful logins clear that connection’s counter. Administrators can review up to 100 recent connection summaries and clear all counters and restrictions under Settings > Mokomaro Login Guard Lite. All included functionality is free without a trial period. There are no locked premium features, remote license checks, telemetry, external libraries, external update servers or external API requests. This plugin does not include AI analysis, a firewall, malware scanning or file integrity monitoring. Use only one login limiter at a time. Disable any previous version or other login- limiting plugin before enabling this plugin. #### Privacy and data retention The plugin stores an HMAC-SHA256 connection identifier derived from REMOTE_ADDR and a site secret, failed-attempt counts, window and restriction expiry timestamps, and the most recent failure timestamp in a local database table. This identifier is pseudonymous, not anonymous. Raw IP addresses, usernames, passwords, request bodies and user agents are not stored. Administrators see a shortened identifier. Daily WP-Cron cleanup removes summaries older than seven days when no restriction is active; low-traffic sites may run cleanup later. Uninstall removes this plugin’s table and scheduled task. Deactivation stops the task and retains records. #### Important limitations Verify REMOTE_ADDR identifies the real visitor at the web server before enabling, especially behind a CDN or reverse proxy. Forwarded headers are deliberately ignored. Shared IP addresses can restrict legitimate users. This initial version supports single-site installations only. Password resets remain available; administrators with no active session can wait for the restriction to expire or disable the plugin using their hosting file manager. This is a login limiter, not comprehensive site protection. Application passwords, external SSO and authentication systems bypassing WordPress’s authenticate/wp_login_failed hooks are outside scope. Other authentication plugins may affect behavior; test compatibility first. ## Screenshots [[ ## Installation 1. Back up your test site and database. 2. Upload the mokomaro-login-guard-lite folder to /wp-content/plugins/. 3. Activate on a single-site test installation. 4. Open Settings > Mokomaro Login Guard Lite. 5. Test login failure limits and recovery before production use. ## FAQ ### Is a paid license required? No. All functionality included in this plugin is free without a time limit. ### Does it send data to external AI services? No. This plugin does not use AI or make external requests. ### Where are translations managed? Translations are managed through translate.wordpress.org and delivered by WordPress language packs. This package does not contain bundled translation files. Until a translation is available, the interface uses English. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Mokomaro Login Guard Lite” is open source software. The following people have contributed to this plugin. Contributors * [ mokomaro ](https://profiles.wordpress.org/mokomaro/) [Translate “Mokomaro Login Guard Lite” into your language.](https://translate.wordpress.org/projects/wp-plugins/mokomaro-login-guard-lite) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/mokomaro-login-guard-lite/), check out the [SVN repository](https://plugins.svn.wordpress.org/mokomaro-login-guard-lite/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/mokomaro-login-guard-lite/) by [RSS](https://plugins.trac.wordpress.org/log/mokomaro-login-guard-lite/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Rename the plugin and text domain to Mokomaro Login Guard Lite. * Use official WordPress language packs without bundled translations. * Remove previous branding and product links. #### 1.0.0 * Initial login limiter and local connection summary. ## Meta * Version **1.0.1** * Last updated **4 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.4 or higher ** * Tested up to **7.1.4** * PHP version ** 8.0 or higher ** * Tags * [Brute Force](https://wordpress.org/plugins/tags/brute-force/)[login](https://wordpress.org/plugins/tags/login/) [security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/mokomaro-login-guard-lite/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/mokomaro-login-guard-lite/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/mokomaro-login-guard-lite/reviews/) ## Contributors * [ mokomaro ](https://profiles.wordpress.org/mokomaro/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/mokomaro-login-guard-lite/)