by
Rayhan Uddin
0 (0 reviews)
SentriLog – Limit Login Attempts, Security & Activity Log
Limit login attempts, hide your login URL, log every auth event, and get email alerts — a lightweight, privacy-first login security plugin.
SentriLog ranks #59,098 among WordPress.org plugins with 0+ active installations, and was last updated Oct 1, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.2.1
Current Version v1.2.1
Updated 1 month ago
Last Update on 01 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
Rank
#59,098
—
No change
Active Installs
0+
-100%
KW Avg Position
185
1 worse
Downloads
421
+4 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
31,530
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 7 more installs to reach 10+
Rank Changes
Current
#59,098
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.2.1
- Last Updated
- Oct 01, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.4
- PHP Version
- 8.0 or higher
- Author
- Rayhan Uddin
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
Frequently Asked Questions
Common questions about SentriLog – Limit Login Attempts, Security & Activity Log
It can, if you enter the wrong credentials too many times. If it happens, you have three easy ways back in: use the Change Login URL emergency recovery link, temporarily deactivate the plugin by renaming its folder over FTP/SSH, or remove the lockout in your database with DELETE FROM wp_rayetun_lsn_lockouts WHERE ip_address = 'YOUR_IP';.
By default, no — SentriLog makes zero external HTTP requests and stores everything in your own WordPress database. The dashboard chart uses Chart.js, bundled locally (MIT licensed) — no CDN. The one exception is the optional CAPTCHA integration: it stays off until you add your own Google reCAPTCHA or Cloudflare Turnstile keys, and when enabled it verifies protected form submissions with your chosen provider. See the External Services section below for exactly what is sent.
Yes. SentriLog hooks WordPress core authentication filters (authenticate, wp_login_failed, wp_login), which fire no matter which login form is used — WooCommerce, BuddyPress, membership plugins, and custom forms are all protected.
Yes. The Change Login URL feature moves wp-login.php to a secret slug you choose and blocks the default endpoint, so bots can't find the form. An emergency recovery link makes sure you can always get back in.
Magic Login creates a temporary, single-use, passwordless login link you can hand to support staff or a client. The temporary user is removed automatically when the link expires or you revoke it — no leftover accounts.
Go to Users → Profile and scroll to the Two-Factor Authentication section. Scan the QR code with any authenticator app, enter the 6-digit code to confirm, and save your profile. You'll be shown a set of backup codes once — store them somewhere safe. From then on, you'll enter a code from your app each time you log in. To turn it off, tick "Disable two-factor authentication" on the same screen and save. (Trusted devices, email codes, and requiring 2FA for whole roles are available in the Pro add-on.)
Yes. SentriLog detects system.multicall brute-force patterns and blocks that request, closing a common password-guessing amplification vector.
SentriLog stores IP addresses in your own database to enforce lockouts and keep an audit trail — IP addresses can be personal data, so you should disclose this in your site's privacy policy. Nothing is ever transmitted to us, logs are auto-deleted after your chosen retention period, and a rayetun_lsn_anonymise_ip filter is available if you want to anonymize stored IPs. If you enable the optional CAPTCHA, visitor IPs are also sent to your chosen provider (Google or Cloudflare) for verification — see External Services below.
It's completely optional and off by default. To turn it on, go to SentriLog → Settings → CAPTCHA, pick a provider — Google reCAPTCHA (get keys) or Cloudflare Turnstile (get keys) — paste your Site Key and Secret Key, choose which forms to protect, and save. Until you add your keys, CAPTCHA does nothing and no data is sent anywhere. See the External Services section for exactly what is shared.
Yes. Export the activity log to CSV directly from the Activity Log screen, respecting whatever filters you have applied.