/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Login Lockdown & Protection

Login Lockdown & Protection

By WebFactory

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Login Lockdown & Protection Review - In-Depth Analysis

Secure your login form by limiting login attempts from the same IP and banning IPs. Protect against brute force attacks.

Performance Overview

WPS Score

6.79/10

User Rating

4.3/5 (based on 61+ reviews)

Active Installations

100,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5.5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Login Lockdown records the IP address and timestamp of failed login attempts. If more than a selected number of attempts are detected within a set period of time from the same IP, then the login is disabled for all requests from that IP address or the IP is completely blocked from accessing the site. This secures the site and helps prevent brute force password attacks and discovery.

The plugin defaults to a 1 hour lock out of an IP block after 3 failed login attempts within 5 minutes. This can be modified in options. Administrators can release locked out IPs manually from the panel. A detailed log is available for all failed login attempts and all IP locks to control lockdown.

Configure the plugin from Settings - Login Lockdown.

Country blocking is a PRO feature that allows you to block unwanted countries from accessing the site or logging in. Display a custom message to blocked visitors so they know why they can't access the site.

Captcha helps get rid of bots and brute-force password attacks. Choose from 5 different versions, including built-in options and Google versions (PRO feature). Built-in captcha is GDPR compatible.

Two Factor Authentication (2FA) is a PRO feature that provides an extra layer of security without needing code generating apps. Even if someone knows your username and password, they won't be able to log in without confirmation from a unique link sent to your email.

Cloud Protection is a PRO feature that allows you to manage IP Whitelists and Blacklists in your Login Lockdown Dashboard, applying them to protect all your sites from a single location.

Temporary Access is another PRO feature that lets you give temporary access to others without sharing a username and password. You can set the lifetime of the link and the maximum number of uses to prevent abuse.

Comparing to Alternatives

Login Lockdown & Protection is a well-regarded plugin in the login security category, offering features like IP blacklists and country blocking. It competes with several other plugins that provide brute force protection and login security.

Top alternatives

Strengths

Offers cloud-based IP blacklist synchronization across sites.
Includes country blocking and allowlisting features.
Regular updates and responsive support for pro users.
Effective at reducing server load from brute force attacks.
Pro version adds enhanced security features.

Weaknesses

Has had multiple medium to high severity security vulnerabilities in the past.
Some features like captcha and 2FA are limited or incomplete.
Free version interface includes intrusive ads and upsells.
Reports of indefinite login lockouts causing site access issues.

User Sentiment Analysis

With a strong majority of 5-star reviews and some critical 1-star feedback, users appreciate the plugin's core functionality and support but report significant issues affecting reliability and feature completeness.

Positive highlights

"Works great – nice features" (ninjajuice)
"Great security, updated with new features, responsive support" (Jim Krenz)
"Awesome Plugin, Saved My Servers!" (jonahcoyote)

Common complaints

Plugin causes 'Unknown' login attempts detected by security tools after installation.
Login lockout sometimes persists indefinitely, locking users out.
Free version is heavily ad-laden and pushes pro upgrades aggressively.

Weaknesses

Limited captcha coverage beyond login form.
Two-factor authentication only via email, no app-based 2FA.
Interface cluttered with pro feature promotions in free version.
Past security vulnerabilities raise concerns despite fixes.

Who Should Use This?

Best for

Users seeking a robust login protection plugin with cloud-based IP blacklists and country blocking, who are willing to invest in the pro version for enhanced features and support.

Not ideal for

Users who require flawless 2FA options, dislike intrusive ads in free plugins, or need guaranteed lockout recovery without risk of indefinite blocking should consider alternatives.

Pricing & Value

Free version includes

The free version offers basic login lockdown features, IP blocking, and some security controls but includes ads and limited functionality.

Pro version (19.99 - 59.99 USD / year)

Adds cloud blacklist synchronization, country blocking, enhanced security features, and priority support.

Final Verdict

Login Lockdown & Protection is a solid choice for users needing comprehensive login security with cloud-based features and country controls. Its high rating and positive user feedback highlight its effectiveness and developer responsiveness.

However, past security vulnerabilities, some incomplete features, and aggressive upselling in the free version may deter some users. Those prioritizing flawless 2FA and ad-free experiences might prefer alternative plugins.

Other Notable Features

Here are a few other notable features of this free Login Lockdown & Protection plugin.

Block Login

Captcha

Firewall

Protect Login

Screenshots

FAQ

Just use standard Plugin overview page in WordPress admin section and deactivate it; or rename the plugin folder /wp-content/plugins/login-lockdown/ using FTP access.