Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/villaingsk/loginara/archive/refs/heads/main.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Fail-ban + Cloudflare Turnstile integration for WordPress login/register/lostpassword + custom login page.
Description
Loginara provides comprehensive login security for WordPress with fail-ban protection and Cloudflare Turnstile integration.
Features:
- Fail-Ban Protection: Automatically ban IPs after failed login attempts
- Cloudflare Turnstile: CAPTCHA protection for login, registration, and password reset
- Custom Login URL: Hide wp-login.php with custom URL slug
- XML-RPC Protection: Block all XML-RPC or allow Jetpack-only XML-RPC
- IP Whitelist: Prevent lockout for trusted IPs
- Admin Dashboard: View and manage banned IPs
- Flexible Configuration: Customize ban duration, failure threshold, and more
Installation
- Upload folder to wp-content/plugins
- Activate plugin
- Go to Settings → Loginara
- Configure Turnstile Site Key & Secret (get from Cloudflare)
- Set max login failures and ban duration
- Add your admin IP to whitelist to avoid lockout
Frequently Asked Questions
How do I get Cloudflare Turnstile keys?
- Sign up at cloudflare.com
- Go to Turnstile dashboard
- Create a new site
- Copy Site Key and Secret Key
- Paste into Loginara settings
What if I get locked out?
- Add your IP to whitelist before testing
- If locked out, rename plugin folder via FTP to disable
- Or manually delete ban from database: wp_loginara_bans table
Does this work with custom login plugins?
Yes, Loginara includes its own custom login URL feature. Disable other custom login plugins to avoid conflicts.