Expanded login access control

Login Lockdown Pro extends Login Lockdown & Protection with additional controls for managing access to a WordPress site. The add-on entries the IP address and timestamp of failed login attempts. When more than the selected number of attempts occur within a selected period from the same IP address, login can be disabled for that IP, or the IP can be completely blocked from accessing the site.

The default lockdown is one hour after three failed login attempts within five minutes, and these values can be modified in the options. Administrators can manually release locked-out IP addresses from the panel, while a detailed log lists failed login attempts and IP locks for review.

Country blocking

The Pro edition can block unwanted countries from accessing the site or prevent users from those countries from logging in. A custom message can be displayed to blocked visitors, providing an explanation for why access is unavailable.

CAPTCHA choices

CAPTCHA options help address bots and brute-force password attacks. The plugin offers five versions: a built-in CAPTCHA, two Google options available in Pro, Cloudflare Turnstile, and hCaptcha available in Pro. The built-in CAPTCHA is GDPR compatible.

Email-link two-factor authentication

Pro includes two-factor authentication without requiring a code-generating application such as Google Authenticator. After entering a username and password, access also requires confirmation through a unique link sent by email. This includes an additional step to the login process and uses access to the email inbox as part of the confirmation workflow.

Centralized IP lists

Cloud Protection includes a Login Lockdown Dashboard, described as a SaaS service for managing multiple sites. From that dashboard, you can manage IP whitelists and blacklists and apply them to protect all the websites you manage from one location.

Temporary access

Temporary Access lets you give another person access without sharing a username or password. Set the link lifetime and maximum number of uses to help limit abuse. The access level can be selected from available roles such as administrator, editor, or author.

Practical workflow

Configure the plugin from Settings > Login Lockdown. Choose the failed-attempt threshold, time period, and lockout behavior, then review the detailed log and release locked IPs manually when needed. For Pro controls, configure country restrictions, CAPTCHA selections, email-link authentication, cloud IP lists, or temporary access according to the access requirements of the site.

Installation and administration

Install and activate Login Lockdown Pro in WordPress, then open its settings area to configure protection options. To disable it later, use the standard Plugin overview page in the WordPress admin section, or rename the plugin folder /wp-content/extensions/login-lockdown/ using FTP access.