Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/onliveserver/oswp-secure-login/archive/refs/heads/main.zipUpdates itself. It ships its own updater, so new versions appear under Dashboard → Updates.
OSWP Secure Login - WordPress Security Plugin
A powerful WordPress security plugin with custom login URL, OTP authentication, SMTP configuration, and IP blocking capabilities.
Features
1. Custom Login URL
- Hide the default WordPress login pages (/wp-admin and /wp-login.php)
- Auto-generates a unique login URL on installation
- Shows 404 page for unauthorized access attempts
- Prevents brute force attacks
2. Two-Factor Authentication (OTP)
- Email-based 6-digit OTP verification
- Configurable maximum attempts (default: 3)
- OTP resend functionality with limits (default: 2 resends)
- Auto-expires after 5 minutes
- Session-based storage for security
- IP blocking after exceeded attempts
3. SMTP Configuration
- Full SMTP setup for reliable email delivery
- One-click test email with debug logging
- Support for TLS/SSL encryption
- Essential for OTP functionality
4. IP Blocking System
- Automatic IP blocking after failed OTP attempts
- Configurable block duration (default: 1 hour)
- Admin interface to view and manage blocked IPs
- Manual unblock capability
Installation
1. Upload the oswp-secure-login folder to /wp-content/plugins/
2. Activate the plugin
3. Go to Secure Login in