Login Lockdown Pro extends Login Lockdown & Protection with controls for failed login attempts and other ways to manage access to a WordPress site.

Set failed-login rules

The extension entries the IP address and timestamp of each failed login. When an IP exceeds the selected number of attempts within the selected period, login can be disabled for that IP or the IP can be blocked from accessing the site. The default lockout is one hour after three failed attempts within five minutes; change these options in the settings. Administrators can review a detailed log of failed attempts and IP locks, then release locked IP addresses from the panel.

Restrict access by country

Country blocking can prevent users from selected countries from accessing the site or restrict only their ability to log in. You can display a custom message to explain why access is unavailable.

Choose a CAPTCHA

Five CAPTCHA versions are available: the built-in option, two Google options in Pro, Cloudflare Turnstile, and hCaptcha in Pro. The built-in CAPTCHA is GDPR compatible.

Confirm logins by email link

After entering a username and password, the visitor must confirm the login through a unique link sent by email. This adds inbox access to the confirmation process and does not require a code-generating app such as Google Authenticator.

Manage IP lists across sites

Cloud Protection delivers the Login Lockdown Dashboard, a SaaS service for managing multiple sites. Use it to manage IP whitelists and blacklists, then apply those lists to the sites you manage from one location.

Grant temporary access

Temporary Access lets you give someone access without sharing a username or password. Set the link lifetime and maximum number of uses, then pick an available access level such as administrator, editor, or author.

Configure and administer the extension

Install and activate Login Lockdown Pro in WordPress, then open Settings > Login Lockdown. Set the failed-attempt threshold, time period, and lockout behavior. Review the log and release locked IPs manually when needed. Configure the Pro controls according to the site's access requirements. To deactivate the plugin, use the Plugin overview in WordPress admin or rename the /wp-content/extensions/login-lockdown/ folder using FTP access.