Admintosh – WordPress admin customization and security tools
Get many solutions for preventing security threats under one roof. Admintosh – WordPress admin customization and security tools plugin is designed for empowering WordPress administrative operations with different experiences. You will get many essential features under one roof using this plugin. Customize WP Login Page: Customize default login page with the Admintosh Login Page Customize options. The plugin offers lots of customization possibilities like background color, background image, text color, link color, logo upload, form style etc. With no coding skill, you can create an outstanding login page in no time. Customize Dashboard: Customize the Dashboard and make it like your own brand all customization possibilities are here like background color, menu color, text color, link color, logo upload, etc. Captcha: Add captch into login, registration, lost password, comments Form etc. It also supported WooCommerce & EDD. The plugin offer 3 types of Captcha Google reCaptcha ( Version 2 ), Random number Captcha and Math Captcha so you could use any one of them’s to protection from remote digital entry by making sure only a human being with the right password can access the account. Limit Login Attempts: After a preset number of attempts has been exceeded, this feature automatically stops any more attempts from a specific Internet Protocol (IP) address and/or username. This considerably reduces the potency of brute force attacks on your website. Hide Login: To change your login URL to whatever you want. This feature allows you to easily and securely change the URL of the login form page to anything you desire. It does not actually rename or change core files, nor does it add rewrite rules. Instead, it intercepts page requests and works on any WordPress website. The wp-admin directory and wp-login.php page become inaccessible so your website becomes more secure. Login History: Monitor your website’s users with detailed login information, including Last login date and time, Environment/server IP address Country, city, continent, timezone Latitude and longitude Browser details And much more. Admin Activity Logs: The Activity Log functions like an airplane’s black box, recording every action in the WordPress admin. It provides a detailed history of user activities, allowing you to monitor exactly what’s happening on your website with full transparency. Track changes, user actions, and plugin/theme modifications. Country Restriction: This feature allows you to easily set up rules to block one or more countries from accessing Entire Site, only login page or only front-end. It allows users to block unwanted traffic from accessing the frontend or backend based on country or proxy server detection. It helps reduce spam, unwanted sign-ups, and enhances overall security. This plugin uses the free IP Geolocation API which offers more than 1 billion requests per day absolutely free. More coming soon… 👁️ Visit | 🔗 Documentation WordPress Authentication Plugin Secure and customize your WordPress site with Admintosh. This all-in-one plugin enhances authentication by adding login customizations, CAPTCHA options, and limiting login attempts. Features like country restrictions, hidden login URLs, and detailed login history provide advanced security tools to protect your WordPress admin and prevent unauthorized access. Brute Force Protection Plugin Protect your WordPress site from brute force attacks with Admintosh. This powerful plugin limits login attempts, blocks suspicious IPs, and adds CAPTCHA options for enhanced security. Features like hidden login URLs and login monitoring ensure robust protection, safeguarding your site from unauthorized access and keeping it secure against threats. WordPress Security Plugin Fortify your WordPress site with Admintosh, the ultimate security plugin. It offers advanced features like CAPTCHA protection, login attempt limits, hidden login URLs, and country-based access restrictions. With login history monitoring and dashboard customization, Admintosh ensures robust security and empowers you to safeguard your site from threats effectively. Activity Log Track all activity on your WordPress site with detailed user and event logs, giving you clear insights into every action happening in real time. ✅ Unauthorized Access Attempts – Detect potential hacking attempts. ✅ Content Changes – Track when a post is published and by whom. ✅ Plugin & Theme Modifications – See when a plugin/theme is activated or deactivated. ✅ Suspicious Admin Activity – Identify unusual actions for enhanced security. Stay informed and keep your website secure! 🚀 Free Version Features Modular Based (Everything Available On Demand) Customize login page style Customize admin panel style Customize admin menu style Customize admin bar style ## 3 types of Captcha ## Google reCaptcha ( Version 2 ) Math Captcha Random number Captcha Login form reCaptcha ## Limit Login Attempts ## Configurable Lockout Timings Remaining Tries ## Hide Login ## Block default wp-login.php Block default wp-admin Use custom login slug instead of wp-admin ## Login History ## Login Date-Time Username User Role IP Address ## Admin Activity Logs ## Username Action Object/ID Message Time IP Address ## Country Restriction ## Entire Site Country Restriction Front-End Country Restriction wp-login page Country Restriction Block Template Content Edit Option ## General Options ## Hide WordPress Version Disable File Editing Disable XML-RPC Disable Right Click Disable Content Copy Disable Login Hints Error Messages Easy settings options Translation ready Easy to use it in both Free and Premium WordPress Themes Unlimited update Compatibility With Sucuri compatibility. Wordfence compatibility. Ultimate Member compatibility. WPS Hide Login compatibility. XMLRPC gateway protection. Woocommerce login page protection. Multi-site compatibility with extra MU settings. GDPR compliant. Custom IP origins support (Cloudflare, Sucuri, etc.). llar_admin own capability. How to use:- very easy to use,after active plugin just go to Dashboard -> Admintosh Settings . You will find all settings to use. WHAT’S NEXT Have a look at the other awesome plugins for WordPress ✳️ PopX – Popup Builder – WordPress Gutenberg Popup Builder Plugin ✳️ Store Notifier – WhatsApp & On-Site Notifications plugin for WooCommerce Unlock new possibilities with WPMOBO plugins—push your limits and achieve more today! 3rd Party Service Used We used google reCAPTCHA v2 API service from google. All relevant link below. https://www.google.com/recaptcha/about/ https://www.google.com/recaptcha/api/siteverify https://www.google.com/recaptcha/api.js Privacy Policy Admintosh uses Appsero SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements. Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users. Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case. Learn more about how Appsero collects and uses this data.
Protect Login
Out of the box, WordPress will happily let anyone try to log in as often as they like. Type the wrong password a thousand times and it just shrugs and shows you the form again – which is exactly what someone running a brute-force script is counting on. Protect Login closes that door. It started life as a fork of Johan Eenfeldt‘s original Limit Login Attempts, a plugin a lot of us leaned on for years, and grew from there. It slows brute-force attacks to a crawl Protect Login watches failed logins per IP address. After a handful of wrong attempts that visitor has to wait before trying again, and if they keep guessing the wait grows. So a script built to try thousands of passwords ends up sitting on its hands. You decide who gets in, and who doesn’t Protect Login keeps a visible list of every address that’s currently locked out, right in the settings, and lets you release any of them with a single click. You can also keep an allowlist of addresses that skip the checks entirely (your office, your VPN’s exit node) and a blocklist of addresses that are turned away immediately. One login list, shared across all your sites If you look after more than one WordPress site – an agency, or just a small pile of your own projects — someone hammering one of them is often about to try the rest. Protect Login can link your sites together over its own Remote API: pick one site as the host, point the others at it with a URL and a key, and the block-, allow- and lockout-lists stay in sync across the lot. Block an address once and it’s blocked everywhere. And a few more things Gets the real client IP right when your site sits behind a reverse proxy or CDN — direct and proxy modes Speaks IPv6, not only IPv4 Works on Multisite, applying settings and lists across the network. Ships WP-CLI commands, so you can manage addresses and settings straight from the terminal. Lets developers set everything in code via filters — and locks the matching field in the UI, so nobody ends up fighting their own filter. Can enforce a minimum password strength for new passwords