/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall

Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall

By WPChef

Security & Privacy / Security Scanning & Malware Protection

Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall Review - In-Depth Analysis

Limit Login Attempts Reloaded enhances your site's security by blocking excessive login attempts. It protects against brute force attacks and optimizes performance.

Performance Overview

WPS Score

7.46/10

User Rating

4.9/5 (based on 1453+ reviews)

Active Installations

2,000,000+

Update Frequency

Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

Limit Login Attempts Reloaded functions as a robust deterrent against brute force attacks, bolstering your website's security measures and optimizing its performance. It achieves this by restricting the number of login attempts allowed. This applies not only to the standard login method, but also to XMLRPC, WooCommerce, and custom login pages.

The plugin functions by automatically preventing further attempts from a particular Internet Protocol (IP) address and/or username once a predetermined limit of retries has been surpassed. This significantly weakens the effectiveness of brute force attacks on your website.

By default, WordPress permits an unlimited number of login attempts, posing a vulnerability where passwords can be easily deciphered through brute force methods.

Upgrade to Limit Login Attempts Reloaded Premium to extend cloud-based protection to the plugin, thereby enhancing your login security. The premium version includes features such as IP intelligence to detect, counter and deny malicious login attempts.

Comparing to Alternatives

Limit Login Attempts Reloaded offers a focused approach to login security by limiting brute force attempts, standing out among similar plugins for its simplicity and effectiveness.

Top alternatives

Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms ( WPS: 6.63)
Simple Login Lockdown ( WPS: 6.7)
Loginizer ( WPS: 7.39)

Strengths

Effective brute force attack protection with real-time blocking.
Lightweight and easy to configure without unnecessary features.
Provides email notifications on lockouts.
Includes firewall features for enhanced security.
Reliable performance with minimal impact on site speed.

Weaknesses

Email notifications lack detailed information such as attempted usernames.
User interface could be more modern and intuitive.
Limited customization options compared to some competitors.
Some advanced features require the pro version.

User Sentiment Analysis

Users generally praise the plugin for its effectiveness and ease of use, though some desire more detailed notifications and enhanced features.

Positive highlights

"Add it to all of my new sites. Surprising sometimes how many attempts it catches." – smithbillsmith
"Simple and work perfect in real time." – madoo211
"Easy to use and does a great job of limiting future attempts if properly setup." – africalion
"Limit Login Attempts was easy to install, does what it promises, and notifies me when it locks a hacker out." – david.ei
"Even the basic version is a great protector against spam logins. Simply in the settings." – schlotte

Common complaints

Email alerts do not include the username or email attempted.
Interface is basic and could be improved.
Some users want more detailed reporting.
Advanced features are locked behind the pro version.

Weaknesses

Limited notification details reduce situational awareness.
Basic UI may not appeal to all users.
Pro features needed for full customization.
Lack of integration with other security tools.

Who Should Use This?

Best for

Website owners seeking a straightforward, effective plugin to protect against brute force login attempts without complex setup.

Not ideal for

Users needing advanced security features, detailed reporting, or extensive customization without purchasing the pro version.

Pricing & Value

Free version includes

The free version provides essential brute force protection, login attempt limits, and email notifications for lockouts, offering solid security for most users.

Pro version

The pro version adds advanced features such as detailed reporting, customizable lockout messages, extended firewall options, and priority support.

Final Verdict

Limit Login Attempts Reloaded is a reliable and easy-to-use plugin that effectively protects WordPress sites from brute force login attacks, making it a valuable tool for enhancing site security.

While the free version covers basic needs well, users seeking more detailed insights and customization may find the pro version beneficial. Overall, it is a recommended choice for users prioritizing simplicity and effectiveness.

Other Notable Features

Here are a few other notable features of this free Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall plugin.

Brute Force

Firewall

Screenshots

FAQ

If you are using contemporary hosting, it’s likely your site uses a proxy domain service like CloudFlare, Sucuri, Nginx, etc. They replace your user’s IP address with their own. If your server is not configured properly, all users will get the same IP address. This also applies to bots and hackers. Therefore, locking one user will lead to locking everybody else out. In the free version of the plugin, this can be adjusted using the Trusted IP Origin setting. In the premium version, the cloud service intelligently recognizes the non-standard IP origins and handles them correctly, even if your hosting provider does not.

Contributors and developers

“Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall” is open source software. The following people have contributed to this plugin.