If you have a WordPress website then most likely you’re receiving thousands of malicious attack on your website per month.
Most common form of attack every WordPress website receive is the – Brute Force Attack.
By default, WordPress allows users to try different usernames and passwords as many times as they want. This feature makes it really easy to unleash brute force attack on WordPress websites.
Secure Your Website By…
- Limiting the number of failed login attempts per user based on their IP Address.
- Changing your administrator username to something other than “Admin”.
- Informing the user about the remaining retries or lockout time on the login page.
- Installing and configuring Limit Login Attempts Reloaded plugin.
Install and Configure the Plugin
- Download the plugin from here.
- Install and activate the plugin.
- Configure the number of retries, total lockout minutes and hours until retries are allowed.
- Save your changes.
- That’s it! You have successfully restricted login attempts on your WordPress website.
We hope you found this article helpful, and you have successfully limited login attempts to your WordPress site. Please share your thoughts and ideas in the comments section below.
Credits- Icon by Vectors Market