{"id":252,"date":"2008-06-16T04:47:13","date_gmt":"2008-06-16T04:47:13","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/login-lockdown\/"},"modified":"2026-04-14T14:40:15","modified_gmt":"2026-04-14T14:40:15","slug":"login-lockdown","status":"publish","type":"plugin","link":"https:\/\/id.wordpress.org\/plugins\/login-lockdown\/","author":9070621,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"2.16","stable_tag":"2.16","tested":"7.0","requires":"4.0","requires_php":"5.2","requires_plugins":null,"header_name":"Login Lockdown","header_author":"WebFactory Ltd","header_description":"","assets_banners_color":"ecfaf8","last_updated":"2026-04-14 14:40:15","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/wploginlockdown.com\/","header_author_uri":"https:\/\/www.webfactoryltd.com\/","rating":4.3,"author_block_rating":4.55,"active_installs":100000,"downloads":1982847,"num_ratings":60,"support_threads":1,"support_threads_resolved":1,"author_block_count":1,"sections":["description","installation","faq","changelog"],"tags":{"1.1":{"tag":"1.1","author":"mvandemar","date":"2008-06-16 05:12:17"},"1.2":{"tag":"1.2","author":"mvandemar","date":"2008-06-16 05:00:23"},"1.3":{"tag":"1.3","author":"mvandemar","date":"2009-02-23 23:12:45"},"1.4":{"tag":"1.4","author":"mvandemar","date":"2009-08-29 07:35:45"},"1.5":{"tag":"1.5","author":"mvandemar","date":"2009-09-17 05:44:06"},"1.6":{"tag":"1.6","author":"mvandemar","date":"2014-03-08 09:37:10"},"1.6.1":{"tag":"1.6.1","author":"mvandemar","date":"2014-09-04 18:49:59"},"1.7.1":{"tag":"1.7.1","author":"mvandemar","date":"2019-07-29 10:23:44"},"1.8":{"tag":"1.8","author":"mvandemar","date":"2019-09-30 09:52:37"},"1.8.1":{"tag":"1.8.1","author":"mvandemar","date":"2022-06-02 06:18:15"},"1.82":{"tag":"1.82","author":"WebFactory","date":"2022-09-23 10:20:07"},"1.83":{"tag":"1.83","author":"WebFactory","date":"2023-03-26 07:52:33"},"2.0":{"tag":"2.0","author":"WebFactory","date":"2023-04-18 07:46:36"},"2.02":{"tag":"2.02","author":"WebFactory","date":"2023-04-24 16:31:35"},"2.05":{"tag":"2.05","author":"WebFactory","date":"2023-05-10 17:23:17"},"2.06":{"tag":"2.06","author":"WebFactory","date":"2023-08-10 06:30:00"},"2.07":{"tag":"2.07","author":"WebFactory","date":"2024-02-08 18:38:05"},"2.08":{"tag":"2.08","author":"WebFactory","date":"2024-01-28 11:51:01"},"2.09":{"tag":"2.09","author":"WebFactory","date":"2024-03-27 08:16:17"},"2.10":{"tag":"2.10","author":"WebFactory","date":"2024-06-14 13:50:23"},"2.11":{"tag":"2.11","author":"WebFactory","date":"2025-04-16 12:19:34"},"2.12":{"tag":"2.12","author":"WebFactory","date":"2025-05-03 14:42:58"},"2.13":{"tag":"2.13","author":"WebFactory","date":"2025-05-15 06:10:08"},"2.14":{"tag":"2.14","author":"WebFactory","date":"2025-08-04 19:45:43"},"2.15":{"tag":"2.15","author":"WebFactory","date":"2025-12-03 19:35:49"},"2.16":{"tag":"2.16","author":"WebFactory","date":"2026-04-14 14:40:15"}},"upgrade_notice":[],"ratings":{"1":9,"2":0,"3":4,"4":0,"5":47},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2901919,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2901919,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":2901916,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.png":{"filename":"banner-772x250.png","revision":2901916,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.1","1.2","1.3","1.4","1.5","1.6","1.6.1","1.7.1","1.8","1.8.1","1.82","1.83","2.0","2.02","2.05","2.06","2.07","2.08","2.09","2.10","2.11","2.12","2.13","2.14","2.15","2.16"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":2900499,"resolution":"1","location":"assets","locale":""},"screenshot-2.png":{"filename":"screenshot-2.png","revision":2900499,"resolution":"2","location":"assets","locale":""},"screenshot-3.png":{"filename":"screenshot-3.png","revision":2900499,"resolution":"3","location":"assets","locale":""}},"screenshots":{"1":"Protect the login form by banning IPs with multiple failed login attempts","2":"Activity shows all failed login attempts and currently banned IPs","3":"Country blocking (PRO feature) allows you to block selected countries from accessing the site"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[1942,362,1174,602,214057],"plugin_category":[38,54],"plugin_contributors":[78032],"plugin_business_model":[],"class_list":["post-252","plugin","type-plugin","status-publish","hentry","plugin_tags-block-login","plugin_tags-captcha","plugin_tags-firewall","plugin_tags-login","plugin_tags-protect-login","plugin_category-authentication","plugin_category-security-and-spam-protection","plugin_contributors-webfactory","plugin_committers-talextech","plugin_committers-webfactory","plugin_support_reps-gordano"],"banners":{"banner":"https:\/\/ps.w.org\/login-lockdown\/assets\/banner-772x250.png?rev=2901916","banner_2x":"https:\/\/ps.w.org\/login-lockdown\/assets\/banner-1544x500.png?rev=2901916","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/login-lockdown\/assets\/icon-128x128.png?rev=2901919","icon_2x":"https:\/\/ps.w.org\/login-lockdown\/assets\/icon-256x256.png?rev=2901919","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/login-lockdown\/assets\/screenshot-1.png?rev=2900499","caption":"Protect the login form by banning IPs with multiple failed login attempts"},{"src":"https:\/\/ps.w.org\/login-lockdown\/assets\/screenshot-2.png?rev=2900499","caption":"Activity shows all failed login attempts and currently banned IPs"},{"src":"https:\/\/ps.w.org\/login-lockdown\/assets\/screenshot-3.png?rev=2900499","caption":"Country blocking (PRO feature) allows you to block selected countries from accessing the site"}],"raw_content":"\n

Login Lockdown<\/a> records the IP address and timestamp of failed login attempts. If more than a selected number of attempts are detected within a set period of time from the same IP, then the login is disabled for all requests from that IP address<\/strong> (or the IP is completely blocked from accessing the site). This secures the site and helps prevent brute force password attacks & discovery.<\/p>\n\n

The plugin defaults to a 1 hour lock out of an IP block after 3 failed login attempts within 5 minutes. This can be modified in options. Administrators can release locked out IPs manually from the panel. A detailed log is available for all failed login attempts and all IP locks to control lockdown.<\/p>\n\n

Configure the plugin from Settings - Login Lockdown.<\/p>\n\n

Country blocking (PRO feature)<\/h4>\n\n

Block unwanted countries from accessing the site, or block them from being able to log in. Display a custom message to blocked visitors so they know why they can't access the site.<\/p>\n\n

Captcha<\/h4>\n\n

The simplest way to get rid of bots and brute-force password attacks. Choose from 5 different versions - built-in one, two from Google (PRO feature), Cloudflare Turnstile, and hCaptcha (PRO feature). Built-in captcha is GDPR compatible.<\/p>\n\n

2FA - Two Factor Authentication (PRO feature)<\/h4>\n\n

Provide an extra layer of security without 2FA code generating apps such as Google Authenticator. Even if somebody knows your username & password they won't be able to log in because it needs to be confirmed by clicking a unique link sent to your email. Since you're the only one that has access to your inbox, you'll never get hacked.<\/p>\n\n

Cloud Protection (PRO feature)<\/h4>\n\n

Manage IP Whitelists and Blacklists in your Login Lockdown Dashboard (a SaaS service for managing all your sites) and apply them to protect all the sites you manage from a single location.<\/p>\n\n

Temporary Access (PRO feature)<\/h4>\n\n

Give temporary access to other people without giving them a username & password. Set the lifetime of the link and the maximum number of times it can be used to prevent abuse. Access level rights can be any you pick - admin, editor, author...<\/p>\n\n\n

    \n
  1. Extract the zip file into your plugins directory into its own folder.<\/li>\n
  2. Activate the plugin in the Plugin options.<\/li>\n
  3. Customize the settings from Settings - Login Lockdown panel.<\/li>\n<\/ol>\n\n\n
    \n

    How to disable this plugin?<\/h3><\/dt>\n

    Just use standard Plugin overview page in WordPress admin section and deactivate it; or rename the plugin folder \/wp-content\/plugins\/login-lockdown\/ using FTP access.<\/p><\/dd>\n

    Will it slow my site down?<\/h3><\/dt>\n

    No, it won't. The majority of the code is only run when logging in.<\/p><\/dd>\n

    How can I report security bugs?<\/h3><\/dt>\n

    You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.<\/a><\/p><\/dd>\n\n<\/dl>\n\n\n

    v2.16<\/h4>\n\n
      \n
    • 2026\/04\/14<\/li>\n
    • minor fixes<\/li>\n<\/ul>\n\n

      v2.15<\/h4>\n\n
        \n
      • 2025\/11\/04<\/li>\n
      • security fix<\/li>\n<\/ul>\n\n

        v2.14<\/h4>\n\n
          \n
        • 2025\/08\/04<\/li>\n
        • performance fixes<\/li>\n<\/ul>\n\n

          v2.13<\/h4>\n\n
            \n
          • 2025\/05\/15<\/li>\n
          • more \"security\" fixes<\/li>\n<\/ul>\n\n

            v2.12<\/h4>\n\n
              \n
            • 2025\/05\/02<\/li>\n
            • security fixes<\/li>\n
            • import\/export function removed due to security issues<\/li>\n<\/ul>\n\n

              v2.11<\/h4>\n\n
                \n
              • 2024\/07\/08<\/li>\n
              • minor security fixes<\/li>\n<\/ul>\n\n

                v2.10<\/h4>\n\n
                  \n
                • 2024\/05\/18<\/li>\n
                • made more strings translatable<\/li>\n<\/ul>\n\n

                  v2.09<\/h4>\n\n
                    \n
                  • 2024\/02\/09<\/li>\n
                  • security fix<\/li>\n<\/ul>\n\n

                    v2.08<\/h4>\n\n
                      \n
                    • 2023\/12\/09<\/li>\n
                    • security\/fatal error fix<\/li>\n<\/ul>\n\n

                      v2.07<\/h4>\n\n
                        \n
                      • 2023\/11\/19<\/li>\n
                      • security fix<\/li>\n<\/ul>\n\n

                        v2.06<\/h4>\n\n
                          \n
                        • 2023\/05\/11<\/li>\n
                        • minor bug fixes<\/li>\n<\/ul>\n\n

                          v2.05<\/h4>\n\n
                            \n
                          • 2023\/05\/09<\/li>\n
                          • bug fix - IP wasn't showing in lockdowns and log tables<\/li>\n<\/ul>\n\n

                            v2.02<\/h4>\n\n
                              \n
                            • 2023\/04\/24<\/li>\n
                            • fixed a few captcha bugs<\/li>\n
                            • added captcha verification when activating it in admin<\/li>\n<\/ul>\n\n

                              v2.0<\/h4>\n\n
                                \n
                              • 2023\/04\/18<\/li>\n
                              • new codebase<\/li>\n
                              • new GUI<\/li>\n
                              • new features<\/li>\n
                              • added captcha<\/li>\n
                              • introduced PRO version<\/li>\n<\/ul>\n\n

                                v1.83<\/h4>\n\n
                                  \n
                                • 2022\/10\/04<\/li>\n
                                • fixed timezone bug<\/li>\n<\/ul>\n\n

                                  v1.82<\/h4>\n\n
                                    \n
                                  • 2022\/09\/23<\/li>\n
                                  • WebFactory took over development<\/li>\n
                                  • a full rewrite will follow soon, for now we patched some urgent things<\/li>\n
                                  • prefixed function names that are in global namespace<\/li>\n
                                  • properly escaped all inputs<\/li>\n<\/ul>\n\n

                                    v1.0<\/h4>\n\n
                                      \n
                                    • 2007\/08\/29<\/li>\n
                                    • initial release<\/li>\n<\/ul>","raw_excerpt":"Protect, lockdown & secure login form by limiting login attempts from the same IP & banning IPs.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/252","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=252"}],"author":[{"embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/webfactory"}],"wp:attachment":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=252"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=252"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=252"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=252"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=252"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}