Initial release of the Brute Force Protector plugin. Secure your site now!<\/p>"},"ratings":[],"assets_icons":{"icon.svg":{"filename":"icon.svg","revision":3547018,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3547242,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3547018,"resolution":"1","location":"assets","locale":"","width":1027,"height":454}},"screenshots":{"1":"The settings page where you can configure the plugin.","2":"The error screen a user sees when their IP is blocked."}},"plugin_section":[],"plugin_tags":[2439,9374,1229,600,264263],"plugin_category":[54],"plugin_contributors":[264264],"plugin_business_model":[],"class_list":["post-297063","plugin","type-plugin","status-publish","hentry","plugin_tags-brute-force","plugin_tags-limit-login-attempts","plugin_tags-login-security","plugin_tags-security","plugin_tags-wp-admin-protection","plugin_category-security-and-spam-protection","plugin_contributors-kanhayaduwanshi","plugin_committers-kanhayaduwanshi"],"banners":{"banner":"https:\/\/ps.w.org\/brute-force-protector\/assets\/banner-772x250.png?rev=3547242","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/brute-force-protector\/assets\/icon.svg?rev=3547018","icon":"https:\/\/ps.w.org\/brute-force-protector\/assets\/icon.svg?rev=3547018","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/brute-force-protector\/assets\/screenshot-1.png?rev=3547018","caption":"The settings page where you can configure the plugin."}],"raw_content":"\n
Brute Force Protector is your site's first line of defense against automated login attacks. Malicious bots constantly try to guess your password using brute force attacks, credential stuffing, and dictionary attacks \u2014 this plugin puts a complete stop to it.<\/p>\n\n
It works by tracking failed login attempts from each IP address. If an IP exceeds the configured number of failures in a short period, it gets temporarily blocked, preventing the attacker from making further attempts. This simple but effective method secures your login page, protects your wp-admin area, and strengthens your overall WordPress security without adding complexity.<\/p>\n\n
Who needs this plugin?<\/strong><\/p>\n\n If you are looking for a way to secure WordPress login, limit login attempts, block bots from wp-login.php, stop brute force password attacks, prevent unauthorized access to your WordPress dashboard, or simply improve your WordPress site security \u2014 this plugin is built for you. It is the ideal WordPress security plugin for beginners and professionals alike.<\/p>\n\n How it helps:<\/strong><\/p>\n\n By acting as a login-level firewall, Brute Force Protector reduces the risk of hacked WordPress sites, compromised admin accounts, and malware injections that often start with a brute force attack. It is a lightweight, zero-configuration WordPress protection tool that starts working the moment it is activated.<\/p>\n\n When an IP is blocked, any attempt to access the login page from that IP will result in a \"Too many failed login attempts\" error screen, and they will be prevented from accessing the site.<\/p><\/dd>\n Yes, you can easily change the maximum number of attempts and the lockout duration from the plugin's settings page, located at \"Settings\" > \"Brute Force Protector\".<\/p><\/dd>\n No. The plugin is designed to be extremely lightweight. It uses WordPress transients to temporarily store failed login data, which is a highly efficient method that has a negligible impact on server resources.<\/p><\/dd>\n Yes. This plugin provides strong WordPress admin login security by monitoring and blocking suspicious IP addresses that repeatedly fail authentication. It acts as a login guard to protect wp-admin and wp-login.php from automated bots and hackers.<\/p><\/dd>\n While this plugin does not rename or move the login URL, it effectively protects your admin login page by blocking brute force attackers after a set number of failed attempts. For full login page hiding or custom login URL functionality, this plugin's login protection works alongside plugins that obscure or rename the login page.<\/p><\/dd>\n Yes. It is designed for hack prevention and bot protection. Automated attack prevention is at its core \u2014 the plugin detects and blocks spam bots and credential-stuffing attacks that try to break into your WordPress site.<\/p><\/dd>\n This plugin functions as a login-level firewall. It provides rate limiting and IP blocking at the login page, acting as an intrusion prevention layer. For a full web application firewall (WAF), you may pair it with a dedicated WordPress firewall plugin.<\/p><\/dd>\n Yes. It limits login attempts to stop credential stuffing, password guessing, and dictionary attacks. By enforcing a login lockdown after too many failed login attempts, it effectively prevents unauthorized access from malicious IPs.<\/p><\/dd>\n Absolutely. Login hardening is one of the most important aspects of site hardening and WordPress security. This plugin secures your login page and reduces the attack surface by blocking IPs that exhibit brute force behavior, complementing other security measures like two-factor authentication.<\/p><\/dd>\n Yes. If you use a plugin to move or rename your wp-login.php to a custom admin URL (login URL change), Brute Force Protector will still protect that login endpoint by monitoring failed login attempts through WordPress's native authentication hooks.<\/p><\/dd>\nFeatures<\/h4>\n\n
\n
\n
brute-force-protector<\/code> folder to the \/wp-content\/plugins\/<\/code> directory.<\/li>\n\n
How do I know if an IP is blocked?<\/h3><\/dt>\n
Can I change the number of allowed attempts?<\/h3><\/dt>\n
Is this plugin heavy on my server?<\/h3><\/dt>\n
Does this plugin help with WordPress admin login security?<\/h3><\/dt>\n
Can this plugin hide or protect the admin login page?<\/h3><\/dt>\n
Does this plugin prevent hack attempts and bot attacks?<\/h3><\/dt>\n
Is this plugin a WordPress firewall or web application firewall (WAF)?<\/h3><\/dt>\n
Does it protect against credential stuffing and password guessing?<\/h3><\/dt>\n
Can it help with site hardening?<\/h3><\/dt>\n
Does it work with custom admin URLs or renamed login pages?<\/h3><\/dt>\n