Login LockDown WordPress Plugin Review

Dec 21, 2009 by Shivendu Madhava

Login LockDown records the IP address and timestamp of every failed WordPress login attempt. If more than a certain number of attempts are detected within a short period of time from the same IP range, then the login function is disabled for all requests from that range. This helps to prevent brute force password discovery. Currently the plugin defaults to a 1 hour lock out of an IP block after 3 failed login attempts within 5 minutes. This can be modified via the Options panel. Admisitrators can release locked out IP ranges manually from the panel.This plugin is must have for every serious blogger to protect their blog from Brute Force login attempts.

After installation, your WordPress Login Box will look something like this.

The default option include 3 Maximum Login retries having 5 minutes of Retry Time Restriction and a lockout period of one hour. You can change these settings as per your requirement.