Manage login policies by role or across the site

Melapress Login Security Premium helps administrators set WordPress login requirements site-wide or for specific user roles. When users have multiple roles, administrators can set policy priority. Premium includes the free edition’s features, with additional controls for accounts, sessions, devices, and sensitive actions.

Account access and password rules

Administrators can manually lock an account when access needs to stop, or configure automatic disabling for inactive WordPress users. A dashboard brings inactive accounts together for review. When an account is unlocked, administrators can require a password reset.

For failed login attempts, configure the lockout duration and how the affected account can be unlocked. Password policies can set minimum length, character requirements, expiration, password history restrictions, and a reset at first login. Administrators can also disable password reset links.

Device, session, and login page controls

• Require security questions for sensitive actions, including password resets and account unlocks.
• Get email alerts when a login comes from an unrecognized device, with an option to terminate that device’s session remotely.
• Extend or shorten session timeouts to balance security and convenience.
• Restrict access to the login page by IP address.
• Change the WordPress login URL and set the old URL to return a 404 response or redirect to a selected page.
• Add a GDPR consent notice to the login page.

Temporary access and urgent response

Temporary login links can expire or have usage limits, providing access without creating an additional user account. If suspicious behavior calls for a wider response, administrators can reset all users’ passwords with one click.

Apply policies to real workflows

Set various password and login requirements for administrators, editors, members, or other user groups. Review inactive accounts in one dashboard, lock accounts that no longer need access, and require a new password when access is restored. For an unfamiliar device, administrators can use the email alert to identify the login and remotely end its session.

The extension also offers one-click integration with third-party extensions such as WooCommerce, LearnDash, and MemberPress, along with other integrations.

Installation and setup

Install and activate Melapress Login Security Premium on the WordPress site, then open its options to configure policies. Choose whether each policy applies site-wide or to particular roles, and review the account, device, session, IP, and consent settings. Before applying restrictions broadly, check the lockout and recovery methods so administrators can manage affected accounts.