PluginSift
PluginsThemesCompare
Directory
  • Plugins
  • Themes
  • Compare Plugins
Plugin Comparisons
  • SEO
  • Security
  • Ecommerce
  • Page Builders
  • Caching
  • Backup
  • Forms
  • Analytics
Resources
  • About
  • Contact
  • llms.txt

© 2026 PluginSift. Data sourced from WordPress.org. · [email protected]

  1. Home
  2. Plugins
  3. Login
  4. XO Security
XO Security icon

XO Security

XO Security is a plugin to enhance login related security.

By ishitaka·Login·Free
5(11 reviews)
·30K+ active installs·Updated 3 months ago
DownloadVisit HomepageCompare

As of April 2026, XO Security is a WordPress login plugin with 30K+ active installations and a 5/5 rating from 11 reviews. It has been downloaded 353K+ times in total. Requires WordPress 4.9+ and PHP 5.6+. Available on WordPress.org since 2016. Download volume is stable this week. Top alternative: WPS Hide Login.

5/511 reviews
30K+active installs
353K+total downloads
10 yearssince 2016

Overview

XO Security is a plugin to enhance login related security.
This plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.

Functions

  • Record login log.
  • Limit login attempts.
  • Add Captcha to the login form and comment form.
  • Change the URL of the login page.
  • Enable two-factor authentication (2FA) for login.
  • Login Alert.
  • Disable login by mail address.
  • Disable login by user name.
  • Change login error message.
  • Disable XML-RPC and XML-RPC Pingback.
  • Disable REST API.
  • Disable author archive page.
  • Remove comment author class of comments list.
  • Remove the username from the oEmbed response data.
  • WooCommerce login page protection.
  • Anti-spam comment.
  • Hide WordPress version information.
  • Edit the author slug.
  • Disable RSS and Atom feeds.
  • Activate maintenance mode.
  • Delete the…
Read full description on WordPress.org

Screenshots

Ratings & Reviews

511 reviews
5 ★
11
4 ★
0
3 ★
0
2 ★
0
1 ★
0

Recent Reviews

Awesome!
by imawc·1 month ago

This plugin is lightweight and easy to use, so I recommend it.

What a great plugin!
by まーちゅう·3 months ago

It’s my top recommendation for security plugins on WordPress sites.
It includes all the security features I need.

基本的なセキュリティ機能が揃っています
by altmmc·2 years ago

タイトル通りです。
AIOS等の定番プラグインと比べると機能は少ないですが、必要最低限の対策が揃っており設定が非常にわかりやすいので使いやすいです。
これだけでは不安という人はBBQ Firewallを併用すると良いです。

This one is all you need !
by Katsushi Kawamori·2 years ago

This one plugin completes my security measures. Thanks !!

Great useful and easy to use!
by Anonymous User 20656096·3 years ago

I recommend for those looking for a simple and reliable security plugin.

Download Trends

Today: 96Yesterday: 106This week: 648Period total: 86K

Compatibility

WordPress4.9+ requiredTested up to 6.9.4
PHP5.6+ required

Version Adoption

v3.10
92.8%
Other
6.3%
v3.1
0.9%

Top Alternatives to XO Security

WPS Hide Login icon
WPS Hide Login
4.82.0M+ installsUpdated 2 months ago
ViewCompare
Loginizer icon
Loginizer
4.81.0M+ installsUpdated 1 month ago
ViewCompare
Security Optimizer – The All-In-One Protection Plugin icon
Security Optimizer – The All-In-One…
4.51.0M+ installsUpdated 4 days ago
ViewCompare
Limit Login Attempts icon
Limit Login Attempts
4.6300K+ installsUpdated 3 years ago
ViewCompare
LoginPress | wp-login Custom Login Page Customizer icon
LoginPress | wp-login Custom Login Page…
4.8200K+ installsUpdated 1 month ago
ViewCompare
View all login plugins →

Frequently Asked Questions

Changelog

3.10.8

  • Fixed a bug that sometimes prevented access to the login page.
View full changelog on WordPress.org

Contributors

ishitakaishitaka
Plugin Info
Version
3.10.8
Last Updated
Dec 6, 2025
WP Requires
4.9+
Tested Up To
6.9.4
PHP Requires
5.6+
Active Installs
30K+
Downloads
353K+
Added
Jan 18, 2016
Business
Free

Tags

loginsecuritytwo factorbrute forcemaintenance

Developer

I
ishitaka
5 plugins0.1M+ total installs
View all plugins →

Quick Compare

XO Security vs WPS Hide Login→XO Security vs Loginizer→XO Security vs Security Optimizer – The All-In-One…→

Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.