Login Lockdown Pro

Choose what an IP lockout affects

Login Lockdown Pro extends Login Lockdown & Protection with controls for WordPress login access. It records the IP address and time of failed login attempts. When an IP exceeds your chosen attempt limit within a set period, you can disable login requests from that IP or block it from accessing the whole site.

The default lockout lasts one hour after three failed attempts within five minutes. Change these values in the settings. Administrators can release locked IP addresses from the panel and review a detailed log of failed attempts and IP locks.

Set country rules and login challenges

Country blocking has two scopes: block users from selected countries from accessing the website, or prevent them from logging in. A custom message can explain why access is unavailable.

Choose among five CAPTCHA versions: the built-in option, two Google options available in Pro, Cloudflare Turnstile, and hCaptcha, also available in Pro. The built-in CAPTCHA is GDPR compatible.

Confirm logins through email

Pro adds email-link two-factor authentication without requiring a code-generating app such as Google Authenticator. After entering a username and password, the user must confirm access through a unique link sent by email. The confirmation relies on access to the email inbox.

Manage IP lists across websites

Cloud Protection offers a Login Lockdown Dashboard, described as a SaaS service for managing multiple sites. Use it to manage IP whitelists and blacklists, then apply those lists to the sites you manage from one location.

Grant limited access without sharing credentials

Temporary Access makes a link for another person to use without sharing a username or password. Set how long the link lasts and its maximum number of uses. Choose an access level from available roles such as administrator, editor, or author.

Configure and administer the plugin

Install and activate Login Lockdown Pro in WordPress, then open Settings > Login Lockdown. Set the failed-attempt threshold, time period, and lockout behavior. Review the log and release locked IPs manually when needed. Configure country restrictions, CAPTCHA choices, email-link authentication, cloud IP lists, or temporary access to match the site's access requirements.

To disable the add-on, deactivate it from the WordPress Plugin overview page, or rename /wp-content/add-ons/login-lockdown/ using FTP access.