KakapoWP KakapoWP
Kakapo Security

Login protection

Guessing doesn't get unlimited time.

After too many failed attempts, Kakapo Security locks out the IP. How many attempts are allowed and how long the lockout lasts is up to you. If you like, the error message no longer reveals whether the username or the password was wrong.

All nine plugins included in the lifetime deal — every future one too.

Login protection

IP lockout after too many failed attempts · attempts and lockout duration configurable

ActiveSettings

What login protection offers

IP lockout after too many failed attempts
Attempts and lockout time configurable
Neutral error message on request
Hooks into the authenticate filter

Here's how it works

1

Failed attempts are counted

2

Limit reached: the IP is locked out

3

Lockout ends after the set time

FAQ about login protection

How many failed attempts are allowed?
You decide that. The number of attempts and the length of the lockout are in the settings and can be changed at any time.
What does someone see after a typo?
By default, the usual WordPress message. If you switch on the neutral error message, it no longer says whether the username or the password was wrong. Anyone hunting for account names learns nothing.
Can I lock myself out?
Yes, that can happen: the lockout applies to the IP the failed attempts came from. It ends automatically once the configured duration has passed.

More Security features

Ready?

Security — pay once, use forever.

All nine plugins for €149 once instead of €13 a month. Secure payment via Stripe. For the first 14 days: problem fixed or money back.

Get lifetime — €149