Description
Webtaru Site Options and Login Security is a comprehensive toolkit for WordPress administrators to manage essential site information, business hours, and visual branding, while simultaneously hardening your site’s security by allowing you to change the default login URL and add CAPTCHA protection.
Features
- Secure Login Customization: Change your WordPress login URL to a custom slug to prevent brute-force attacks.
- CAPTCHA Integration: Support for Google reCAPTCHA v3 and Cloudflare Turnstile to protect your login forms.
- Branding Management: Easily manage site logos, login page aesthetics, and custom contact icons.
- Business Hours: Flexible weekly schedule management with built-in “Open/Closed” status shortcodes.
- Schema.org Integration: Automatic LocalBusiness JSON-LD generation for improved SEO.
- Workflow Utilities: Disable Gutenberg, enable content duplication, and perform database cleanup with one click.
- Agency Mode: White-label the plugin by customizing the menu name and hiding the default icon.
External services
This plugin supports the following third-party services to enhance site security:
-
Google reCAPTCHA (v3): Used to protect the login form from automated bot attacks.
- Service: Google reCAPTCHA
- Usage: Verification of human users during login.
- Data Sent: User’s IP address and browser interaction signals.
- Privacy Policy: https://policies.google.com/privacy
- Terms of Service: https://policies.google.com/terms
-
Cloudflare Turnstile: A privacy-focused alternative to CAPTCHA for protecting login forms.
- Service: Cloudflare Turnstile
- Usage: Verification of human users during login.
- Data Sent: Browser and device telemetry.
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
- Terms of Service: https://www.cloudflare.com/website-terms/
Shortcodes
[wtols_phone]– Display primary phone.[wtols_email]– Display primary email.[wtols_address]– Display business address.[wtols_logo]– Display light/dark logo.[wtols_map]– Display embedded map.[wtols_social_links]– Display social icons.[wtols_hours]– Display business hours or open/closed status.[wtols_contact_card]– Display a complete contact info block.
Screenshots
Dashboard overview and contact details. 
Floating widgets 
Login protection and brute force settings. 
Workflow Utilities have disable Gutenberg, comment etc. 
System and backup options.
Installation
- Upload the
webtaru-site-options-login-securityfolder to the/wp-content/plugins/directory. - Activate the plugin through the ‘Plugins’ menu in WordPress.
- Navigate to Webtaru Site Options in your admin menu to configure settings.
Reviews
May 8, 2026
I’ve been using the WebTaru Site Options & Login Security plugin for a while now, and it has significantly improved my site’s security. The ability to hide the login page and restrict access is a game changer for preventing brute force attacks. It’s very lightweight and doesn’t slow down the site. The interface is user friendly, making it easy to configure even for beginners. Highly recommended for anyone looking to add an extra layer of protection to their WordPress site!
May 8, 2026
I have installed plugin in my website, and found that plugin have many useful features which are daily needs. Login page url change is my one of favourite because it protects website login page from unwanted spammers. Many other features like disabled comments, CTA buttons, deactivate gutenberg, login captcha, duplicate page and post many mores. Love it!
Contributors & Developers
“Webtaru Site Options and Login Security” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Webtaru Site Options and Login Security” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.2.6
- Refactored and rebranded as “Webtaru Site Options and Login Security”.
- REMOVED: Prohibited arbitrary code insertion features (Header/Footer code, PHP snippets, Custom CSS).
- HARDENED: Security through strict input sanitization and late-stage output escaping.
- IMPROVED: Standardized asset enqueuing and style injection.
- UPDATED: Documentation to disclose external service usage (Google reCAPTCHA, Cloudflare Turnstile).
1.0.0
- Initial release of the rebranded version.