Login Locker

This plugin is designed for website administrators who want to increase security by controlling access to the login page. It prevents bots and attackers from directly targeting the standard login URL while keeping legitimate users informed about their account activity.

• Direct Login Page Blocking: The primary feature stops all direct requests to the /wp-login.php file. This makes common brute-force attacks against the default login URL ineffective, as the page will not load for unauthorized requests.
• User Login Notifications: Sends email alerts to users when a successful login occurs from a new device or location. This helps users detect unauthorized access to their accounts quickly.
• Failed Login Alerts: Administrators can receive notifications after a configurable number of failed login attempts. This provides an early warning system for potential brute-force attacks targeting user credentials.
• Custom Login URL Support: Works alongside plugins that set a custom or hidden login page. By blocking the default path, it forces all login traffic through your designated secure URL.
• Granular Notification Settings: Control which events trigger emails, allowing you to tailor alerts for new logins, password changes, or failed attempts without overwhelming users or admins.