All in One Login Premium

All in One Login Premium brings together login controls and page customization for WordPress. The base extension includes a custom login URL, Google reCAPTCHA, email OTP, email-based 2FA, IP controls, activity logs, and username protections. Additional Pro functions require the separate AIO Login Pro add-on.

Control login access

Change the default WordPress login URL and add Google reCAPTCHA v2 or v3 to help reduce automated attempts. Pro includes hCaptcha. Cloudflare Turnstile is an optional CAPTCHA alternative for supported flows, including passwordless and Magic Link login.

Use IP blacklists to block selected addresses or whitelists to allow trusted ones. The plugin can block common usernames and requests that try to discover usernames through author or query-string requests. Pro adds limits on failed login attempts with lockouts and logs of visitor enumeration attempts. Login activity logs include details such as usernames, IP addresses, times, and lockouts.

Choose sign-in and recovery options

Email OTP lets users sign in with a one-time code sent to their inbox, and email-based 2FA adds a verification step during login. Pro adds app-based 2FA, backup codes for times when a user's primary method is unavailable, and grace periods for rolling out 2FA. Administrators can generate 1 to 20 one-time backup codes per user.

For passwordless access, Pro also works with SMS OTP through Twilio, one-click Login Links sent by email, and temporary login URLs. Temporary URLs can have expiration and visit limits. Social login supports Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE. Supported social login and passwordless options can also be used on WooCommerce account and checkout pages.

Customize the page and redirect users

Use the live preview customizer to change the login page's logo, colors, background, and layout. Templates, Google Fonts, and custom CSS provide further styling options without requiring code for the visual controls.

Create login and logout redirection rules for all users, selected roles, or specific accounts. Pro also includes password-strength options for minimum length, character requirements, and uppercase and lowercase letters.

Review alerts and site coverage

Pro can send Slack alerts for failed logins, IP lockouts, and suspicious activity. Webhooks send security events to HTTPS endpoints for services such as Zapier, Make, n8n, or custom monitoring systems. The plugin supports WordPress Multisite, with supported login features available across the network.

Set up and check the login flow

Install All In One Login on your WordPress website, then configure the login URL, CAPTCHA option, access controls, and page styling. Enable the authentication and recovery methods your site needs, and test sign-in, sign-out, redirects, and account recovery before applying the setup for regular users.