S
by
laceous
5 (1 reviews)
Semisecure Login Reimagined
"Re-imagined" version of Semisecure Login that uses public and secret-key encryption to encrypt passwords when logging in.
Semisecure Login Reimagined ranks #18,201 among WordPress.org plugins with 70+ active installations, is #419 of 1,500 in the Authentication category, a 5/5 rating from 1 reviews, and was last updated Jul 15, 2011. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 3.1 (Current: 7.0.2)
vtrunk
Current Version vtrunk
Updated 15 years ago
Last Update on 15 Jul, 2011
Refreshed 11 hours ago
Last Refreshed on
#419 of 1,500 in Authentication
Top 50% by installs
No update in over a year
Rank
#18,201
+7 this week
Active Installs
70+
—
No change
KW Avg Position
58
—
No change
Downloads
51.3K
+1 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(1 reviews)
Next Milestone 80
70+
80+
781
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 4 more installs to reach 80+
Rank Changes
Current
#18,201
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
1 reviews
Overall
100%
5
1
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 1 of 1| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| RSA | 58 | — | Tag | 1 day ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- trunk
- Last Updated
- Jul 15, 2011
- Requires WP
- 3.1+
- Tested Up To
- 3.1
- PHP Version
- N/A
- Author
- laceous
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 1
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
7K+ installs
#2,725
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#990
WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More
5M+ installs
#9
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
Loginizer
1M+ installs
#43
Maintenance
1M+ installs
#58
All-In-One Security (AIOS) – Security and Firewall
1M+ installs
#63
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
700K+ installs
#86
Frequently Asked Questions
Common questions about Semisecure Login Reimagined
A user attempts to log in via the login page. If JavaScript is enabled, a secret-key is generated and used to encrypt the password along with a nonce, the public-key encrypts the secret-key, and the original (unencrypted) password is not sent. The server decrypts the secret-key with the private-key which is used to decrypt the password+nonce. The nonce is verified before handing the password over to WordPress for verification. If JavaScript is not enabled, the password is sent in cleartext just like normal. This is inherently insecure over plaintext channels, but it is the default behavior of WordPress.
When the login form is displayed, the message "Semisecure Login is enabled" will appear underneath the Username and Password fields. If for some reason it isn't working (i.e., if JavaScript is not enabled, or you're running a browser that doesn't support certain necessary JavaScript functions), the message will read, "Semisecure Login is not enabled! Please enable JavaScript and use a modern browser to ensure your password is encrypted." Note: v2.0 adds support for encrypting passwords on the user administration pages. In this case, the message "Semisecure Login is enabled" will only appear if the option has been activated (and JavaScript is enabled). If not, then nothing will be displayed.
Short answer: No, but it's better than nothing. Without SSL, you're going to be susceptible to replay attacks/session hijacking no matter what. What this means is that if someone is able to guess or learn the session ID of a logged-in user (which would be trivial to do in an unprotected wireless network), then essentially they could do anything to your WordPress site by masquerading as that user.
The point of this is to prevent your password from being transmitted in the "clear." If someone is in a position where they can learn your session ID, under normal circumstances, they'd also be able to learn your password. The proper use of this plugin removes that possibility.
Use SSL. This means you'll have to have a dedicated IP (which usually costs additional money) and an SSL certificate (which is expensive for a "real" one, but if you're just using this for your own administration purposes, a "self-signed" certificate would probably suffice). Any more detail on these two things is beyond the scope of this document.
