Protect Login
by Simon Kraft 5 (3 reviews)

Protect Login

Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.

Protect Login ranks #8,177 among WordPress.org plugins with 600+ active installations, is #231 of 1,580 in the Authentication category, a 5/5 rating from 3 reviews, and was last updated Jul 1, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7.0.4 (Current: 7.1)
v1.5.1 Current Version v1.5.1
Updated 2 months ago Last Update on 01 Jul, 2026
Refreshed 10 hours ago Last Refreshed on
#231 of 1,580 in Authentication Top 25% by installs
View on WordPress.org
Rank
#8,177
+12 this week
Active Installs
600+
-12.3%
KW Avg Position
99.5
0.5 worse
Downloads
22.8K
+11 today
Support Resolved
0%
No change
Rating
100%
Review 5 out of 5
5 (3 reviews)

Next Milestone 700

Total Progress 90%
600+ 700+
69
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 10 more installs to reach 700+

Rank Changes

8,166 8,179 8,193 8,206 8,219 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
8,165 8,181 8,197 8,212 8,228 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Current #8,177
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
0 10 20 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0
3 reviews
Overall 100%
5
3 (100%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Support Threads Overview

Resolved
Unresolved
1
Total Threads
0
Resolved
1
Unresolved
0%
Resolution Rate

Security History

Source: WPVulnerability

No known vulnerabilities on record for Protect Login. Checked 1 month ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who want to secure their login page against automated attacks. It solves brute-force login attempts by throttling repeated failed logins per IP and letting admins manage allow/block/lockout lists, optionally shared across multiple sites.

  • Throttles brute-force login attempts
  • Lockout list with manual release
  • IP allowlist and blocklist
  • Remote API syncs lists across sites
  • Reverse proxy and CDN support
  • IPv6 support
  • Multisite support
  • WP-CLI commands

Frequently Asked Questions

Common questions about Protect Login

We care about WordPress and about keeping WordPress sites secure. So we took the code of the original Limit Login Attempts plugin and built on top of it. We did it for you: Protect Login is 100% free, with no nasty upsells and no scare marketing. You've got better things to do, haven't you?
That's very much on purpose. If we did, you could brute-force the "admin" password simply by logging in as your own user every fourth attempt — which would defeat the point.
If you're not sure, chances are it isn't. A reverse proxy is a server that sits between your site and the internet – often handling caching or load-balancing – and it makes working out the correct client IP a little trickier. If you do use one, switch on proxy mode under Settings → Protect Login → Advanced and add your proxy's IP or CIDR range to the trusted-proxies list, so a forwarded header can't be spoofed.
Yes. There's an allowlist tab in Protect Login's settings, and you can add your current address with a click.
Either wait until your account or IP is released, or — if you have FTP or SSH access — rename the wp-content/plugins/protect-login folder to switch the plugin off, log in, and rename it back.
Yes. As long as your web server passes an IPv6 address through to WordPress.
Please report security bugs found in the source code of the Protect Login plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.

Sign In / Register

You need to sign in or register to use this feature.