WordPress.org

Plugin Reviews

iThemes Security (formerly Better WP Security)

The easiest, most effective way to secure WordPress in seconds.

175 reviews
Average Rating
4.7 out of 5 stars
You are currently viewing the reviews that provided a rating of 1 star. Click here to see all reviews.
Locked Me Out
By , for WP 4.2.1

First off, this is my first bad review of any plugin.

Installed, set everything up (took my time to be careful).

Exited the site (Admin).

Tried to enter Admin - Locked Out!

After read the recent "bad" reviews here, I was a little hesitant about trying this plugin, but I also heard and read some really good reviews of the plugin, so I gave it a try.

How do they expect you to pay for the "Pro" version, if you get problems like being locked out so easily.

I deleted the plugin, restored my database, and on to something else.

DOWNTIME after enabling plugin
By , for WP 4.2.2

right after I've installed your plugin I've enabled it's features and BOOM! a powerful dedicated server went completely UNRESPONSIVE. I could not even login via console, Cpanel etc. the only way to bring it back was by disabling everything on the server, so I can ERASE your plugin. It took me 2 hours of DOWNTIME, until I managed to delete your plugin's folder, and everything went back to normal!!!
SHAME ON YOU for such a stupid plugin! it costed my greatly!

Too vague (perhaps deliberately)
By , for WP 4.2.1

There are a plethora of options for this Plug-in, but the options are badly worded/explained, and some are downright dangerous (read: can break your site). Despite Whitelisting our site, we weren't able to get our site to render properly (who knows what visitors saw---or didn't see).

And their Support is rubbish. A forum that deletes your posts when you attempt to post an issue? Not even a warning that you failed a CAPTCHA (if that was the probelem): the post just disappears, so you have to retype it. Guessing it's a sneaky way to get you to pay for support, ie, can't post to our Forum and obscure options.

We kept getting lockout messages, but there was no way to disable this 'feature'.

Definitely wouldn't recommend this Plugin.

Too easy to Break
By , for WP 4.2.1

This might seem like a great plugin, but there are way too many options -- and choosing the wrong one will PERMANENTLY remove your access from your site. The only option, once this happens, is to delete wordpress and start over -- hopefully you have a backup from before the failure, because if you don't, you've just lost all your content, as well.

There is, contrary to various web sites, NO WAY to recover from enabling SSL on the site -- deleting table rows, deleting tables, modifying the wp-config, modifying .htaccess, removing the plugin directory, none of these will work. They've hidden the resolution for this problem, forcing you to pay for premium support if you want it fixed.

There should be clear instructions on fixing this problem, rather than outdated nonsense several years old, and a cloud of secrecy. This is a total bait and switch.

Don't risk using this plugin.

Desastre total
By , for WP 4.2.1

Este plugin de seguridad, me ha bloqueado todo el servidor, no tengo acceso ni a la web, ni al cpanel del servidor, ni tampoco acceso por ftp. No puedo acceder por ning├║n sitio para poder borrar el plugin y el archivo .htaccess.
No se que hacer

Calificaci├│n 0 estrellas

Lost my site and backup file was empty
By , for WP 4.1.1

I installed this plugin and as advised made a backup using the plugin. I checked it had been emailed and then followed the instructions to secure my site. Suddenly I was being asked to install WordPress again and went I went to use the db backup the zip file was empty.
I now have to create the site all over again.

product will lock you out for no reason
By , for WP 4.1.1

Apparently this product sucks. It locks you out even when you have the the site booked marked and password saved. Now I have to take down my site because their syncing does not even work.

Blocks you right after install - and after uninstall + SSL epic mess
By , for WP 4.1.1

Clicking the "Temporarily Whitelist my IP" blocks you, and you have to manually edit the DB to unblock.

Also, email notifications don't work whatsoever. They never have, so I assume they never will.

Do not suggest this to anyone that doesn't know how to manually delete SQL entries.
---

So, I try to add SSL to my site. This plugin created an epic mess. It basically hijacks the SSL settings of the site, so that when you enable https, it creates an endless redirection loop.

Being annoyed as **** at this plugin now, I disabled it... and now I can't login to WordPress at all anymore.

Is there a negative star option? Please?

Second Installation Failed
By , for WP 4.1

This, after reading the comments from other users with similar issues, is the third and final time I will uninstall the plugin, after it keeps redirecting my login page to an unknown page rendering the site useless until renaming the plugin. Too bad, seems it could be a good one that might convert users to paid from free?

Obnoxious Upgrade/Rate pop-up
By , for WP 4.1

I really don't care how well a Web-based product works when it constantly places an annoying reminder smack dab on the Dashboard Welcome page for everyone, including my clients, to see.

Remove, or at least make an option available, to prevent this from happening in the future, and I might reinstall your product.

You must log in to submit a review. You can also log in or register using the form near the top of this page.