DoLogin Security
In one click, your WordPress login page will be pretected with the smart brute force attack protection! Any login attempts more than 6 in 10 minutes (default value) will be limited.
Limit the number of login attempts through both the login and the auth cookies.
-
Two-factor Authentication login.
-
Text SMS message passcode for 2nd step verification support.
-
Cloudflare Turnstile (better than Google reCAPTCHA).
-
GeoLocation (Continent/Country/City) or IP range to limit login attempts.
-
Passwordless login link.
-
Support Whitelist and Blacklist.
-
GDPR compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed).
-
WooCommerce Login supported.
-
XMLRPC gateway protection.
API
-
Call the function
$link = function_exists( 'dologin_gen_link' ) ? dologin_gen_link( 'your plugin name or tag' ) : '';to generate one passwordless login link for the current user. -
Call the function
$link = function_exists( 'dologin_gen_link' ) ? dologin_gen_link( 'note/tip for this generation', $user_id ) : '';to generate a passwordless login link for the user which ID is$user_id.
The generated one-time used link will be expired after 7 days.
- Define const
SILENCE_INSTALLto avoid redirecting to setting page after installtion.
CLI
-
List all passwordless links:
wp dologin list -
Generate a passwordless link for one username (for the login name
root):wp dologin gen root -
Delete a passwordless link w/ the ID in list (for the record w/ ID 5):
wp dologin del 5
How GeoLocation works
When visitors hit the login page, this plugin will lookup the Geolocation info from API, compare the Geolocation setting (if has) with the whitelist/blacklist to decide if allow login attempts.
Privacy
The online IP lookup service is provided by https://www.doapi.us. The provider’s privacy policy is https://www.doapi.us/privacy.
Based on the original code from Limit Login Attemps plugin and Limit Login Attemps Reloaded plugin.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| g*x.hu (WP 7.0.2) | F | Aug 3, 2026 | |
| o*a*t*k*i*a*.com (WP 7.0.2) | F | Aug 2, 2026 | |
| f*u*e*i*d*v*l*n*i*.com (WP 6.8.6) | F | Aug 1, 2026 | |
| g*n*h*.art (WP 7.0.2) | F | Jul 28, 2026 | |
| i*t*e*s.com (WP 7.0.2) | B | Jul 27, 2026 | |
| c*m*l*e*a*h*o*s*o*.com (WP 7.0.2) | A | Jul 26, 2026 | |
| m*4.com (WP 7.0.2) | F | Jul 25, 2026 | |
| i*s*i*u*o*m.es (WP 6.9.5) | F | Jul 25, 2026 | |
| f*r*t*l*a*s*.com (WP 6.1.1) | F | Jul 25, 2026 | |
| b*t*c*t*b*.com (WP 7.0) | D | Jul 23, 2026 | |
| r*n*o*l*s*i*.com (WP 7.0.2) | F | Jul 23, 2026 | |
| o*i*o*e.com (WP 7.0.2) | C | Jul 22, 2026 | |
| a*a*e*a.com (WP 7.0.2) | F | Jul 21, 2026 | |
| a*u*c*f*e*.com (WP 7.0.2) | F | Jul 20, 2026 | |
| h*a*u*i*g*c*a*.com | C | Jul 19, 2026 | |
| h*a*u*i*a*c*t.com | C | Jul 19, 2026 | |
| b*o*o*m*t*c*.es (WP 6.7.5) | F | Jul 17, 2026 | |
| s*m*-*a*.com (WP 7.0.1) | F | Jul 17, 2026 | |
| q*i*k*i*d*t*r*.com (WP 7.0.1) | F | Jul 17, 2026 | |
| y*o*h*e.com (WP 7.0.1) | F | Jul 16, 2026 | |
| j*e*p*a*e*a*m*.com | F | Jul 15, 2026 | |
| v*b*t*e.com (WP 7.0.1) | F | Jul 15, 2026 | |
| s*y*o*a*.com (WP 6.7.2) | F | Jul 12, 2026 | |
| x*r*s*o*.com (WP 6.9.4) | F | Jul 12, 2026 | |
| t*n*o*r*i*g.com | F | Jul 12, 2026 | |
| n*a*i*t*c*.com (WP 7.0.1) | B | Jul 11, 2026 | |
| q*i*i*.com (WP 6.8.1) | C | Jul 10, 2026 | |
| t*c*g*r.com (WP 7.0) | D | Jul 9, 2026 | |
| m*k*i*c*f*.com (WP 7.0) | F | Jul 8, 2026 | |
| e*l*e*e*h.com (WP 6.8.1) | C | Jul 7, 2026 | |
| m*h*o*.com (WP 7.0) | F | Jul 7, 2026 | |
| g*m*o*a.com (WP 6.8.1) | C | Jul 7, 2026 | |
| c*c*k*s*s.com (WP 7.0) | F | Jul 5, 2026 | |
| a*r*s*n*.com (WP 6.9.4) | F | Jul 5, 2026 | |
| b*t*c*t*.c*m.bd (WP 7.0) | D | Jul 4, 2026 | |
| i*d*a*n*t*r*l*e*s*n*j*w*l*e*y.com (WP 7.0) | F | Jul 3, 2026 | |
| h*v*-*t*r*.com (WP 6.8.5) | F | Jul 3, 2026 | |
| a*r*s*n*t*e*d*.com (WP 6.9.4) | F | Jul 3, 2026 | |
| c*l*b*b.com (WP 6.7.2) | C | Jul 2, 2026 | |
| m*g*s*n*i*a*e*l*.com | C | Jul 1, 2026 | |
| 7*s*r*n*.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*m.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*e.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*a.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*o.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*k.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*o.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*m.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*c.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*i.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*g.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*v.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*o.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*z.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*m.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*u.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*i.com (WP 7.0) | F | Jul 1, 2026 | |
| v*b*t*e.com (WP 7.0) | F | Jul 1, 2026 | |
| i*a*i*e*r*a*a*e*y.com (WP 6.7) | F | Jul 1, 2026 | |
| m*o*k*u*a.com (WP 6.9.4) | F | Jul 1, 2026 | |
| u*n*g*t*a*k.com (WP 7.0) | F | Jun 30, 2026 | |
| m*k*i*.es (WP 7.0) | F | Jun 30, 2026 | |
| i*l*e*i*o*i*l.com (WP 7.0) | F | Jun 30, 2026 |