SpoofProof
SpoofProof alters the WP login screen using a web service to verify that you are not being attacked by spoofing, phishing, or Man in the middle.
00
·10 active installs·Updated 9 years agoAs of April 2026, SpoofProof is a WordPress security plugin with 10 active installations and a 0/5 rating0. It has been downloaded 1.6K+ times in total. Requires WordPress 4.3+ and PHP false+. Available on WordPress.org since 2015. Last updated 9 years ago — may have compatibility concerns. Top alternative: Wordfence Security – Firewall, Malware….
0/5Rating
10active installs
1.6K+total downloads
11 yearssince 2015
Overview
SpoofProof alters the WP login screen to have a two (2) stage login with data from the server selected and or entered by the user displayed to the user to prove they are talking to your server, and not a spoofed site. (This means a hacker can’t Spoof or Phish your site).
SpoofProof hooks into the WordPress engine to filter out Javascript and SQL injection from posts to your site.
SpoofProof tracks login attampts and stops Brute Force attacks by imposing waiting periods on rapid login attempts.
SpoofProof Detects Man In the Middle (MItM) attacks in progress, records the IP address of the hacker(s) in your log, and stops the user from revealing their password to the hacker(s). (This stops a hacker from using a MItM to get around the two stage login)
Ratings & Reviews
00 reviews
5 ★
0
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 4.3+ requiredTested up to 4.6.30 |
| PHP | false+ required |
Top Alternatives to SpoofProof
Frequently Asked Questions
Changelog
1.0.0.2
- Released 11/13/2015
- Fixed bugs with Brute Force detection.
- Fixed bugs in MITM detection service that mis reported some attacks.
- Fixed interface bugs which stripped colors from text that were for emphasis.
- Altered the way internal paths were read from WordPress to support more installations.
standard directories.\n
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.