Protection from login, registration and reset-password brute-force attacks. No captcha.
As of April 2026, Security-Protection is a WordPress login plugin with 400 active installations and a 4.3/5 rating from 11 reviews. It has been downloaded 15K+ times in total. Requires WordPress 3.0+ and PHP false+. Available on WordPress.org since 2014. Last updated 5 years ago — may have compatibility concerns. Top alternative: WPS Hide Login.
Why humans should prove that they are humans by filling captchas? Lets bots prove that they are not bots with adding javascript to their user-agents!
Security-Protection blocks and stops brute-force attacks.
Want to read more how Security-Protection plugin works?
Plugin is easy to use: just install it and it just works.
Important: delete ‘admin’ username if you have it on your site. More than 90% of brute-force attacks try to crack the ‘admin’ username.
Few of the most commonly used and worst passwords. Do not use them or similar:
| WordPress | 3.0+ requiredTested up to 5.5.18 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.