All in One Login Premium adds Pro capabilities to the All In One Login add-on for managing WordPress sign-in and login-page options. The base extension includes login URL customization, Google reCAPTCHA, email OTP, email-based 2FA, activity logs, and IP controls. Pro adds further authentication, access, and notification options.

Login access controls

Change the default WordPress login URL and use Google reCAPTCHA v2 or v3 to help reduce automated attempts. Cloudflare Turnstile is also available as an optional CAPTCHA alternative. The base plugin includes IP blacklisting and whitelisting, visitor enumeration protection, and activity logs for login attempts.

Pro adds hCaptcha, limits on failed login attempts with lockouts, and user enumeration logs. It also includes password strength controls for minimum length, character requirements, and uppercase and lowercase rules. The plugin supports WordPress Multisite, with supported login capabilities available across the network.

Choose authentication and recovery options

Email OTP lets users sign in with a one-time code sent to their email. The base plugin also supports email-based two-factor authentication. Pro adds app-based 2FA and one-time backup codes, along with grace periods for a 2FA rollout.

For passwordless access, Pro supports SMS OTP through Twilio, one-click Login Links sent by email, and temporary login URLs. Temporary links can have expiration and visit limits. Social sign-in supports Google, Facebook, Microsoft, LINE, GitHub, Apple, and Discord.

Login page appearance and redirects

The login-page customizer includes a live preview while you change logos, colors, backgrounds, and layouts. Pro adds login templates and access to more than 1,900 Google Fonts. Login and logout redirection rules can apply to all users, selected roles, or specific accounts. Pro also supports social login and passwordless options on WooCommerce account and checkout pages.

Slack notifications can report failed logins, IP lockouts, and suspicious activity. Webhooks send security events to HTTPS endpoints for connections with tools such as Zapier, Make, n8n, or custom monitoring systems.

Configure and verify login behavior

Install the plugin on your WordPress website and open its settings to configure the login URL, CAPTCHA or Turnstile, failed-attempt controls, and login-page design. Set up any required authentication method and its recovery options. Test sign-in, sign-out, redirection, and account recovery before applying the configuration for regular users.