WP Manifestindependent plugin directory
manifest / security / loginara

Loginara

Fail-ban + Cloudflare Turnstile integration for WordPress login/register/lostpassword + custom login page.

by Kref Studio · github.com/villaingsk/loginara · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/villaingsk/loginara/archive/refs/heads/main.zip
Readme github.com/villaingsk/loginara ↗

Fail-ban + Cloudflare Turnstile integration for WordPress login/register/lostpassword + custom login page.

Description

Loginara provides comprehensive login security for WordPress with fail-ban protection and Cloudflare Turnstile integration.

Features:

  • Fail-Ban Protection: Automatically ban IPs after failed login attempts
  • Cloudflare Turnstile: CAPTCHA protection for login, registration, and password reset
  • Custom Login URL: Hide wp-login.php with custom URL slug
  • XML-RPC Protection: Block all XML-RPC or allow Jetpack-only XML-RPC
  • IP Whitelist: Prevent lockout for trusted IPs
  • Admin Dashboard: View and manage banned IPs
  • Flexible Configuration: Customize ban duration, failure threshold, and more

Installation

  1. Upload folder to wp-content/plugins
  2. Activate plugin
  3. Go to Settings → Loginara
  4. Configure Turnstile Site Key & Secret (get from Cloudflare)
  5. Set max login failures and ban duration
  6. Add your admin IP to whitelist to avoid lockout

Frequently Asked Questions

How do I get Cloudflare Turnstile keys?

  1. Sign up at cloudflare.com
  2. Go to Turnstile dashboard
  3. Create a new site
  4. Copy Site Key and Secret Key
  5. Paste into Loginara settings

What if I get locked out?

  1. Add your IP to whitelist before testing
  2. If locked out, rename plugin folder via FTP to disable
  3. Or manually delete ban from database: wp_loginara_bans table

Does this work with custom login plugins?

Yes, Loginara includes its own custom login URL feature. Disable other custom login plugins to avoid conflicts.