Limit concurrent WordPress logins, prevent account sharing, and choose whether to block new logins or remove older sessions.

Secure WordPress login with Turnstile, 2FA, hide login, WAF, brute force protection, passkeys, social login, activity logs and branding.

Bug reports and feature requests can be filed at the GitHub repository. == Screenshots ==

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

Standards-based two-factor authentication (TOTP & e-mail), brute-force lockout, login alerts and an audit log — with no external service.