/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Limit Login Attempts

Limit Login Attempts

By Automattic

Security & Privacy / Security Scanning & Malware Protection

Limit Login Attempts Review - In-Depth Analysis

Limit the number of login attempts for each IP address to enhance security. Fully customizable settings are available.

Performance Overview

WPS Score

6.74/10

User Rating

4.6/5 (based on 202+ reviews)

Active Installations

300,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5.87 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Limit the number of login attempts possible both through normal login as well as using auth cookies.

By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.

Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.

Features include limiting the number of retry attempts when logging in, fully customizable settings, and the ability to inform users about remaining retries or lockout time on the login page. The plugin also offers optional logging and email notifications.

Comparing to Alternatives

Limit Login Attempts is a straightforward plugin designed to prevent brute force attacks by limiting login attempts. It stands out for its simplicity compared to other more feature-rich alternatives.

Top alternatives

Strengths

Simple and easy to configure without unnecessary features
Effectively limits login attempts to prevent brute force attacks
Lightweight and does not bloat the site
Trusted by many users for basic login security

Weaknesses

Lacks advanced features like email notifications to multiple addresses
No recent updates, raising potential security concerns
No premium version with enhanced capabilities
Limited customization options compared to some alternatives

User Sentiment Analysis

Users appreciate the plugin's simplicity and effectiveness but note some limitations and maintenance concerns.

Positive highlights

'Does what it says on the tin' – straightforward and reliable (doreenhawdon)
'Love this plugin' for being simple and effective against brute force attacks (Guido)
'Indispensable Plugin! Vital to the health of my site!' with over 100 hacking attempts blocked (wiitguru)
'Getting a lot better' after initial issues (brightvesseldev)
'Makes it harder for hackers to access your blog' (inakijm)

Common complaints

Lack of recent updates and maintenance
No option to send notifications to additional email addresses
Limited features compared to other security plugins
Some initial setup issues reported

Weaknesses

Potential security risks due to infrequent updates
Missing advanced notification and customization features

Who Should Use This?

Best for

Users seeking a lightweight, no-frills plugin to limit login attempts and protect against brute force attacks without added complexity.

Not ideal for

Those who want advanced security features, frequent updates, or premium support options should consider other plugins with more robust offerings.

Pricing & Value

Free version includes

The free version provides essential login attempt limiting functionality to protect your site from brute force attacks without any cost.

Final Verdict

Limit Login Attempts is a reliable and straightforward plugin that effectively limits login attempts to enhance site security. Its simplicity and lightweight nature make it appealing for users who want basic protection without unnecessary features.

However, the lack of recent updates and advanced functionalities may be a concern for some. Users requiring more comprehensive security features or active development might want to explore alternative plugins.