Threat Protection
Bot protection, brute-force limits, and blocklists.
9 articles
Brute Force Protection
Limit failed logins, manage locked users, and get lockout alerts.
-
Login Attempt Limits
Updated
Set how many failed logins trigger a lockout, how long it lasts, stricter second-tier limits, when the counter resets, and your recovery URL.
-
Locked Users
View accounts locked after repeated failed logins, filter them by lockout phase, and unlock or delete users one at a time or in bulk.
-
Lockout Notifications
Choose an email for lockout alerts, pick which events send one, including extended lockouts and recovery URL use, and cap alerts per hour.
-
Login Notifications
Set up login alerts for failed attempts, lockouts and new devices, choose a notification email, and schedule daily or weekly digest emails.
Bot Protection
Add reCAPTCHA or Turnstile to login, registration, comment, and checkout forms.
-
General Settings
See which forms reCAPTCHA and Turnstile cover, and use No-Conflict Mode and CAPTCHA Priority to pick one provider when both apply to a form.
-
Cloudflare Turnstile
Add Cloudflare Turnstile to WordPress and WooCommerce forms, verify your site and secret keys, and set the widget theme and language.
-
Google reCAPTCHA
Add Google reCAPTCHA v2 or v3 to login, registration, password reset, comment and WooCommerce forms, and verify your site and secret keys.
Email Blocklist
Configure blocked email addresses and email verification checks.
-
Email Blocklist
Configure a blocklist of email addresses and wildcard domains, track entries added over time, and import or export the list as CSV.
-
Email Verification
Configure email verification checks for syntax, MX records, disposable and role-based addresses, and choose which forms they run on.
Secure your site today
Install the free plugin from WordPress.org and set up real protection with the guided setup wizard. Upgrade to Pro whenever you need more.