Login With Ajax – Fast Logins, 2FA, Redirects vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Login With Ajax is for sites that need user logins or registrations and would like to avoid the normal wordpress login pages, or add AJAX effects to the regular login pages. This plugin adds the capability of placing a login widget in the sidebar with smooth AJAX login effects. Some of the features: AJAX-powered logins, no screen refreshes! Login Registration Remember/Reset Password PassKeys (new in 4.4) Next-Generation security, no passwords required! Users can log in without a username AND password. Biometric support (fingerprint, face ID, etc.) 2FA – Two-Factor Authentication TOTP – Time-based One-Time Password Scan a QR code with popular authenticator apps like Google Authenticator, Authy, etc. Email – Send a code to the user’s email address Backup Codes – Generate and use backup codes Integrate 2FA setup options in other plugin account pages WooCommerce BuddyPress BuddyBoss “AJAXify” other login forms Create a better login experience in the default WP login form with AJAX effects for logins, password recovery and registration. Regular WP login and registration forms WooCommerce login forms Events Manager login forms Many ways to display and customize your login form: Gutenberg Blocks Full-site editor compatible Widgets (classic and blocks) Shortcode Template Tags PHP API Flexible templates and options Multiple templates to choose from Including Modal/Pop-Up login forms Responsive and Accessible! Choose a base color for each individual login form. Individual display options via all display methods (e.g. Gutenberg Blocks, Shortcode etc.) Create your own upgrade-safe templates, or override our own ones. Custom Login/Logout redirections Redirect users to custom URLs on Login and Logout Redirect users with different roles to custom URLs WPML – Language-specific redirects Modify registration email templates Other Features Disable CSS styling (via shortcode or PHP display methods) SSL-compatible Fallback mechanism, will still work on javascript-disabled browsers Compatible with WordPress, MultiSite, BuddyPress and many other plugins Developer Friendly Multiple PHP and JS hooks Overridable CSS and JS files Easy-to-customize and overridable template files Well-documented First released in 2009, the oldest login plugin for WordPress, regularly maintained and updated since then! Pro Add-On Features As of version 4.0, we now offer a Pro add-on which extends Login With AJAX with multiple new features: Security Features – Harden the security of your login forms 2FA – Additional Two-Factor Authentication Methods: SMS – Send a code to the user’s phone WhatsApp – Send a message, user clicks a button, done! Telegram – Send a message, user clicks a button, done! reCaptcha (v2, v2 Invisible and v3) Login limiter 3rd Party Page Builder Blocks/Widgets/Modules Divi Elementor More on the way! Getting Help/Support Version 4 is a major overhaul of the plugin, which has remained largely unchanged for 11 years yet remained a staple tool for logins to WordPress! Changes include a complete rewrite of login templates updated to modern stadnards and practices, as well as new WP features such as Gutenberg Blocks. If you’re stuck, we strongly suggest visiting our Documentation Site which contains exensive information and advice on setup and troubleshooting. If you have any problems with the plugin after reading our Troubleshooting, please visit our freely supported community forums, or Go Pro for premium support. Notes Please visit our documentation site, which is regularly and extensively maintained and updated with all the information relevant to getting started, advanced setup and troubleshooting common issues.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!