Theme My Login Security is a lightweight WordPress add-on that locks down your login and user access without slowing your site. It extends the popular Theme My Login experience with modern security tools—2FA, reCAPTCHA, brute-force protection, and session controls—so you can protect accounts, reduce spam, and keep your dashboard safe.
- Two-Factor Authentication (email, authenticator apps, backup codes)
- reCAPTCHA on login, register, and password forms
- Brute-force login protection with lockouts and cooldowns
- Login attempt limits per username and IP
- Session management with force logout and device tracking
- Email alerts for suspicious or failed login attempts
- IP allow/deny lists and country blocks (where supported)
- Password strength enforcement and expiration options
- Hide/rename wp-login.php and customize login URLs
- Block user enumeration and author scans
- Disable XML-RPC or restrict to specific methods
- Login timeout and idle session auto-logout
- Protect WooCommerce and membership logins
- Works seamlessly with Theme My Login templates
- Lightweight, fast, and compatible with most caching