by
MantraBrain
1 (1 reviews)
Authlify – Custom Login URL, Login Security, 2FA & Login Page Designer
Hide your login URL, stop brute-force attacks, add CAPTCHA, 2FA and passkeys, and design your login page. Built so you never get locked out.
Authlify ranks #24,520 among WordPress.org plugins with 30+ active installations, is #1,434 of 5,058 in the Security category, a 1/5 rating from 1 reviews, and was last updated Oct 6, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1
v3.1.0
Current Version v3.1.0
Updated 1 month ago
Last Update on 06 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
#1,434 of 5,058 in Security
Top 50% by installs
Rank
#24,520
—
No change
Active Installs
30+
+66.7%
KW Avg Position
102.3
1 worse
Downloads
2.9K
+15 today
Support Resolved
0%
—
No change
Rating
20%
Review 1 out of 5
1
(1 reviews)
Next Milestone 40
30+
40+
3,657
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5 more installs to reach 40+
Rank Changes
Current
#24,520
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
1.0
1 reviews
Overall
20%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
1
(100%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 3.1.0
- Last Updated
- Oct 06, 2026
- Requires WP
- 6.4+
- Tested Up To
- 7.1
- PHP Version
- 7.4 or higher
- Author
- MantraBrain
Support & Rating
- Rating
- ★ ☆ ☆ ☆ ☆ 1
- Reviews
- 1
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about Authlify – Custom Login URL, Login Security, 2FA & Login Page Designer
Yes. Everything described above, including the custom login URL, lockouts, every CAPTCHA provider, two-factor login, passkeys, the designer and the activity log, is free with no limits and no expiry. Authlify Pro is an optional add-on for teams, stores and agencies.
Check your email: Authlify sends the login address to the site admin email every time it changes. You can also add define( 'AUTHLIFY_DISABLE_HIDE', true ); to wp-config.php to bring back wp-login.php, or run wp authlify url get with WP-CLI.
Wait for the lockout to end, or use the "email me an unlock link" option on the lockout screen. With WP-CLI, wp authlify unlock --all lifts every lockout. Add your own IP address to the "Never lock out" list to avoid it in future.
Both change the login URL without touching .htaccess. Authlify also closes the routes that commonly leak the secret address (such as /wp-admin/, /login, password-reset and signup links, the Customizer and privacy emails), proves it with Leak Check, asks you to confirm a new address before it applies, and adds lockouts, CAPTCHA, two-factor login, passkeys and a login designer. It can import your WPS Hide Login address in one click.
Yes for most sites: lockouts per IP and network, escalating lockout lengths, allow and block lists, lockout emails, a log with CSV export, and correct IPs behind Cloudflare or a proxy, all free. It can import your Limit Login Attempts Reloaded settings.
It stops the huge volume of automated attacks on wp-login.php, which saves server resources and log noise. Pair it with lockouts, CAPTCHA and two-factor login for real protection. Leak Check also shows what a hidden URL does not cover, such as XML-RPC and application passwords.
Cloudflare Turnstile is free and invisible for most visitors. ALTCHA runs entirely on your own server, so no visitor data goes to a third party. hCaptcha and reCAPTCHA v2/v3 are also supported. You can show the CAPTCHA only after failed logins.
They can. Once a user adds a passkey on their profile, they can sign in with the "Sign in with a passkey" button and Face ID, Touch ID, Windows Hello or a security key, or use it as their second step. Passkeys need PHP 8.0 or later with the OpenSSL extension, and a site on https.
Yes. Lockouts, the block list and two-factor login apply to every login that goes through WordPress, whichever form it comes from. The CAPTCHA covers WooCommerce (My Account and checkout, classic and block), Easy Digital Downloads, Ultimate Member, MemberPress and BuddyPress/BuddyBoss forms; Ultimate Member and Easy Digital Downloads also show Authlify's lockout message instead of "wrong password". Links to the login page from other plugins are rewritten to your custom address automatically.
Yes, from Two Factor and WP 2FA. Go to Authlify → Settings → Switch plugins, click Preview to see how many users would be imported, then Import, and deactivate the other plugin. Users keep the same entry in their app. Wordfence Login Security secrets cannot be copied (Wordfence does not document their format), so those users set up their app again.
