Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.
As of April 2026, Limit Login Attempts Reloaded is a WordPress 2FA plugin with 2.0M+ active installations and a 4.9/5 rating from 1,446 reviews. It has been downloaded 82M+ times in total. Requires WordPress 3.0+ and PHP false+. Available on WordPress.org since 2016. Actively maintained — updated within the last month. Downloads are down 84% this week. Support resolution rate: 40%. Top alternative: Wordfence Security – Firewall, Malware….
Limit Login Attempts Reloaded functions as a robust deterrent against brute force attacks, bolstering your website’s security measures and optimizing its performance. It achieves this by restricting the number of login attempts allowed. This applies not only to the standard login method, but also to XMLRPC, Woocommerce, and custom login pages. With more than 2.5 million active users, this plugin fulfills all your login security requirements.
The plugin functions by automatically preventing further attempts from a particular Internet Protocol (IP) address and/or username once a predetermined limit of retries has been surpassed. This significantly weakens the effectiveness of brute force attacks on your website.
By default, WordPress permits an unlimited number of login attempts, posi…
Does a good job of limiting login tries. Helps reduce spam logins and brute force attempts. The setup was simple and is running fine. Could be a bit more flexible, but still useful 👍
This plugin is first effective in blocking (limiting) login attempts from hackers. Second, it even shows you the IP address with its location.
En utmärkt hjälp föratt skydda min hemsida mot attacker
This plugin has protected me from many attacks, and arned me just it time. Essential for all my wordpress sites.
Because WordPress cannot run as a standalone application, security measures are essential.
The fact that a feature that detects and alerts users via email about irregular unauthorized access from overseas is available for free is extremely helpful.
Of course, it goes without saying that 2FA should be used in conjunction with this feature, but since 2FA alone doesn’t guarantee security, I think this plugin should be installed.
| WordPress | 3.0+ requiredTested up to 6.9.4 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.