/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Login Lockdown & Protection

Login Lockdown & Protection

By WebFactory

Security & Privacy / Security Scanning & Malware Protection

Login Lockdown & Protection Review - In-Depth Analysis

Secure your login form by limiting login attempts from the same IP and banning IPs. Protect against brute force attacks.

Performance Overview

WPS Score

6.9/10

User Rating

4.3/5 (based on 60+ reviews)

Active Installations

100,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5.5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Login Lockdown records the IP address and timestamp of failed login attempts. If more than a selected number of attempts are detected within a set period of time from the same IP, then the login is disabled for all requests from that IP address or the IP is completely blocked from accessing the site. This secures the site and helps prevent brute force password attacks and discovery.

The plugin defaults to a 1 hour lock out of an IP block after 3 failed login attempts within 5 minutes. This can be modified in options. Administrators can release locked out IPs manually from the panel. A detailed log is available for all failed login attempts and all IP locks to control lockdown.

Configure the plugin from Settings - Login Lockdown.

Country blocking is a PRO feature that allows you to block unwanted countries from accessing the site or logging in. Display a custom message to blocked visitors so they know why they can't access the site.

Captcha helps get rid of bots and brute-force password attacks. Choose from 5 different versions, including built-in options and Google versions (PRO feature). Built-in captcha is GDPR compatible.

Two Factor Authentication (2FA) is a PRO feature that provides an extra layer of security without needing code generating apps. Even if someone knows your username and password, they won't be able to log in without confirmation from a unique link sent to your email.

Cloud Protection is a PRO feature that allows you to manage IP Whitelists and Blacklists in your Login Lockdown Dashboard, applying them to protect all your sites from a single location.

Temporary Access is another PRO feature that lets you give temporary access to others without sharing a username and password. You can set the lifetime of the link and the maximum number of uses to prevent abuse.

Comparing to Alternatives

Login Lockdown & Protection offers robust brute force protection with a focus on login security, standing out among similar plugins with its proactive features and regular updates.

Top alternatives

Strengths

Effective brute force attack protection reducing server load significantly.
Regular updates and responsive developer support.
Includes two-factor authentication via email.
Customizable login path to obscure login URL.
Pro version adds advanced security features.

Weaknesses

Limited 2FA options, lacking app-based authenticators like Google Authenticator.
Captcha only appears on login form, missing on other forms like lost password or comments.
Free version includes intrusive ads and upsells for pro features.
Some users report issues with login lockouts persisting beyond set time limits.

User Sentiment Analysis

User feedback highlights both the plugin's effectiveness and areas needing improvement, reflecting a mixed but generally positive reception.

Positive highlights

"Worth the money for pro!" - Jim Krenz
"Saved my servers by cutting CPU and memory usage significantly." - jonahcoyote
"Developers are responsive and regularly update the software." - Jim Krenz

Common complaints

Persistent login lockouts causing 503 errors.
Captcha not appearing on all relevant forms.
Limited 2FA options, only email-based available.
Free version heavily promotes pro features with ads and widgets.

Weaknesses

Some users experience unexplained login attempts despite protection.
Interface cluttered with pro feature promotions in free version.
2FA lacks support for popular authenticator apps.
Captcha implementation is incomplete across site forms.

Who Should Use This?

Best for

Users seeking a straightforward and effective login protection plugin with responsive support and regular updates, especially those willing to invest in the pro version for enhanced features.

Not ideal for

Users requiring comprehensive two-factor authentication options including app-based authenticators, or those who prefer an ad-free free version experience may find this plugin less suitable.

Pricing & Value

Free version includes

The free version offers basic brute force protection and login lockdown features but includes ads and limited functionality, encouraging upgrade to pro.

Pro version (19.99 - 59.99 USD / year)

The pro version provides advanced security features such as enhanced two-factor authentication, customizable login paths, and removal of ads, delivering greater control and protection.

Final Verdict

Login Lockdown & Protection is a solid choice for users looking to secure their WordPress login against brute force attacks with a plugin that is actively maintained and supported.

However, limitations in two-factor authentication options and intrusive ads in the free version may deter some users, making it best suited for those who opt for the pro upgrade or have basic security needs.

Other Notable Features

Here are a few other notable features of this free Login Lockdown & Protection plugin.

Block Login

Captcha

Firewall

Protect Login

Screenshots

FAQ

Just use standard Plugin overview page in WordPress admin section and deactivate it; or rename the plugin folder /wp-content/plugins/login-lockdown/ using FTP access.