Block wp-login vs BruteGuard – Brute Force Login Protection

Block wp-login.php and use a secret login URL Block wp-login prevents automated requests from reaching the default WordPress login endpoint. It creates a secret login URL for authorised users and adds Apache rewrite rules that return a 403 Forbidden response for direct requests to wp-login.php. Because blocked requests are rejected before WordPress loads, the plugin can reduce the server resources consumed by bots repeatedly targeting wp-login.php. Features include: Choose your own secret login slug or generate a random one. Block direct access to the default wp-login.php endpoint with a 403 response. Continue to support password resets, registration and WordPress administration email verification through the secret login URL. Rebuild the secret login file after a WordPress core update. Optionally email administrators when the login URL changes. Optionally notify the site owner when an administrator signs in from an IP address that is not on the known-IP list. Important compatibility information Block wp-login requires an Apache web server with mod_rewrite and a writable .htaccess file in the WordPress root directory. It is not compatible with Nginx or servers that do not honour .htaccess rules. Hiding the default login endpoint reduces automated login traffic, but it is not a replacement for strong passwords, two-factor authentication, updates, backups or other appropriate security controls.

BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks. Botnets and other malicious scripts attack millions of websites each and every day BruteGuard is a brute force attack prevention plugin that guards you against botnets by connecting its users to track failed login attempts across all WordPress installations that use the plugin. Once you activate BruteGuard you become part of a inter-connected protection layer against botnet attacks. BruteGuard logs failed attempts network wide Our plugin logs and blocks IPs across the entire network. The more users use BruteGuard the safer the whole network including you gets. BruteGuard fully supports multi sites and is an additional security layer so can be used with any other security plugin.