Login Lockdown Pro extends Login Lockdown & Protection with additional ways to manage access to a WordPress site. It records the IP address and timestamp of failed login attempts, then applies the response you configure for an IP that exceeds the attempt limit within the selected period.

Set the response to failed attempts

Choose whether to disable login requests from an IP or block it from accessing the site. The default lockout is one hour after three failed attempts within five minutes; you can change these values in the settings. Administrators can release locked IP addresses from the panel and review a detailed log of failed attempts and IP locks.

Apply country and CAPTCHA rules

Country blocking can restrict visitors from selected countries from accessing the site, or limit only their ability to log in. You can show blocked visitors a custom message explaining why access is unavailable.

Choose from five CAPTCHA versions: the built-in option, two Google options available in Pro, Cloudflare Turnstile, and hCaptcha, also available in Pro. The built-in CAPTCHA is GDPR compatible.

Confirm logins through email

Email-link two-factor authentication does not require a code-generating app. After entering a username and password, the visitor must confirm access by opening a unique link sent to their email. This makes access to that inbox part of the login process.

Manage IP lists across sites

Cloud Protection uses the Login Lockdown Dashboard, a SaaS service for managing multiple websites. Manage IP whitelists and blacklists from the dashboard and apply them across the sites you manage.

Issue temporary access links

Give someone access without sharing a username or password. Set the link's lifetime and maximum number of uses, then pick an access role such as administrator, editor, or author.

Configure the add-on

In WordPress, open Settings > Login Lockdown. Set the failed-attempt threshold, time period, and lockout behavior, then review the log and release locked IPs manually when needed. Configure country restrictions, CAPTCHA choices, email-link authentication, cloud IP lists, or temporary access to match the site's access requirements.

Install or disable

Install and activate Login Lockdown Pro in WordPress, then open its settings to configure protection options. To disable it, deactivate it from the WordPress admin Plugin overview page, or rename the extension folder /wp-content/plugins/login-lockdown/ using FTP access.