Lock Down Admin Login Page (3 Ideas)

One of the first security recommendations for WP security is to lock down the admin login page to prevent against brute force attacks. One technique is to make it only accessible from approved IP addresses. This is usually handled by changing the .htacess file Another is to use a buggy plugin but that's just one reason why we here don't use WP!

Solution 1:
Add the ability to configure a list of IPs that are allowed to see the admin login page. All others would see an error or 404.

Side note, (and maybe this is a show stopper) there would need to be some notes on how to fix it through the back end if you found yourself locked out because of an IP address change.

Solution 2:
Provide admin page throttling controls to lock the admin page for some period of time after some number of failed attempts.

Solution 3:
Capta on the admin login page.

Edited by

You can rename the admin folder name to something that would be hard to guess
https://www.picturespro.com/sytist-manual/installation/renaming-the-admin-folder-after-installation/

Edited by

I would appreciate any efforts that could be made to increase the security of our websites Tim.

Edited by