WordPress.org

WP Login Security 2 provides enhanced security by requiring users to whitelist their IP address. If the IP address is not recognized, the plugin will send an email to the user with a link that contains a one-time key. Optionally the blog administrator can also be notified.

If a user logs in from a known IP address no further action is required.

What does this Plugin do?

1. Each time a user logs in, the plugin will compare their existing IP address to the last seen IP address.
2. If the IP does not match or no IP addresses have been whitelisted, an email will be sent to the users registered email address.
3. The user must login to their email and click the included link, which contains the one-time password.
4. The plugin can be configured to also send an email to the blog administrator as well as the user.

Updates from the original plugin

This plugin is based on the original WP Login Security plugin developed by joshuascott94.

Since the original plugin is not supported any longer we took over and made a few updates:

1. Fixed: Incorrect number of parameters were passed to mt_rand().
2. Recoded: The plugin notifications on the login screen only worked when Output Buffering was turned on in php.ini.
3. Added buttons to clear whitelist and outstanding activation codes.
4. Added code to clean up data on uninstallation.