Login Gatekeeper

Von learnhowwp

Beschreibung

Login Gatekeeper adds an extra layer of security to your WordPress login page by requiring a custom key and value in the login URL (e.g. /wp-login.php?secret=myvalue). You can restrict which user roles require the key, helping to prevent brute force and bot login attempts.

Stealth Protection:
The plugin does not modify the appearance or behavior of the default WordPress login page. Anyone accessing the login page without the correct secret and value will see the standard WordPress error message, even if they enter the correct username and password. This means attackers cannot detect that extra protection is in place.

Easily configure your login key, value, and restricted roles from the WordPress admin settings page. The plugin also includes a risk confirmation step to prevent accidental lockout.

Lost your secret or value?
If you forget your login key or value, you can use the default WordPress „Lost your password?“ feature. The secret key and value will be included in the password reset email, allowing you to regain access without needing to disable the plugin.

Features:

Require a custom key/value in the login URL
Restrict login by user role
Easy-to-use settings page
Prevents brute force and bot login attempts
No visible changes to the login page for added stealth
Secret and value included in password reset email if forgotten

Check Out Our Other Plugins

Screenshots

Installation

Upload the plugin folder to /wp-content/plugins/login-gatekeeper/
Activate the plugin through the ‚Plugins‘ menu in WordPress
Go to Settings > Login Gatekeeper to configure your key, value, and roles

FAQ

What happens if I forget my login key or value?: If you forget your login key or value, you can use the default WordPress „Lost your password?“ link on the login page. The password reset email will include your current secret key and value, so you can regain access. If you lose access to your email, you can still disable the plugin via FTP or your hosting file manager.
Can I choose which user roles require the login key?: Yes, you can select which roles require the key from the plugin settings page.
Is this compatible with custom login pages?: The plugin is designed for the default WordPress login page. Compatibility with custom login forms may vary.
Will users know the plugin is active on the login page?: No. The plugin does not change the appearance or behavior of the login page. If someone tries to log in without the correct secret and value, they will see the default WordPress error message, even if their username and password are correct. This helps keep your security measures hidden.