WP Manifestindependent plugin directory
manifest / security / login-shield

Login Shield

WordPress login protection with brute-force blocking, IP whitelists and event logs.

by mrshahbazdev · github.com/mrshahbazdev/login-shield

0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/mrshahbazdev/login-shield/archive/refs/heads/main.zip

Readme

Login Shield – WordPress Login Protection

Login Shield is a lightweight security plugin that protects your WordPress login form from brute-force attacks. It limits failed login attempts, blocks offending IPs for a configurable duration, and keeps a detailed log of all login events.

Features

  • Brute-force protection: limit failed attempts per IP within a sliding time window.
  • IP lockouts: automatically block IPs that exceed the allowed number of failures.
  • Whitelist & blacklist: support single IPs, wildcards (192.168.1.*) and CIDR ranges (192.168.1.0/24).
  • Custom lockout message: display your own message on the login form when an IP is blocked.
  • Event logs: track failed, locked and successful login attempts from a single dashboard.
  • Admin dashboard: summary cards show failed attempts, lockouts and currently blocked IPs.

Screenshots

Dashboard

Login Shield Dashboard

Event Logs

Login Shield Logs

Settings

Login Shield Settings

Lockout Message

Login Shield Lockout

Installation

  1. Download the latest login-shield.zip from Releases.
  2. Upload and extract to wp-content/plugins/login-shield/.
  3. Activate the plugin.
  4. Go to Tools > Login Shield to configure settings and view logs.

Requirements

  • WordPress 6.5 or higher
  • PHP 7.4 or higher

License

GPL-2.0-or-later

Read the full README on GitHub →