KakapoWPKakapoWP
Log inTry for free
Kakapo Security

Login protection

Guessing doesn't get unlimited time.

After too many failed attempts, Kakapo Security locks out the IP. How many attempts are allowed and how long the lockout lasts is up to you. If you like, the error message no longer reveals whether the username or the password was wrong.

Login protection

IP lockout after too many failed attempts · attempts and lockout duration configurable

ActiveSettings

What login protection offers

IP lockout after too many failed attempts
Attempts and lockout time configurable
Neutral error message on request
Hooks into the authenticate filter

Here's how it works

1

Failed attempts are counted

2

Limit reached: the IP is locked out

3

Lockout ends after the set time

FAQ about login protection

How many failed attempts are allowed?
You decide that. The number of attempts and the length of the lockout are in the settings and can be changed at any time.
What does someone see after a typo?
By default, the usual WordPress message. If you switch on the neutral error message, it no longer says whether the username or the password was wrong. Anyone hunting for account names learns nothing.
Can I lock myself out?
Yes, that can happen: the lockout applies to the IP the failed attempts came from. It ends automatically once the configured duration has passed.

More security features

Ready?

Try Security free for 24 hours.

No credit card, no risk. Up and running in 2 minutes.

Try it for free now