What Is WP Login Lockdown?
WP Login Lockdown is a WordPress security plugin developed by WebFactory Ltd, a Croatia-based WordPress specialist founded in 2009. The plugin focuses on protecting WordPress login pages from brute-force attacks, unauthorized access attempts, and malicious bots. It is available as both a free plugin on the WordPress.org repository (under the name Login Lockdown & Protection) and as a premium PRO version with expanded capabilities.
The free version provides core login protection features including login attempt limits, IP address tracking, and basic lockout mechanisms. The PRO version adds cloud-based IP blacklists, a centralized management dashboard, country-level blocking, two-factor authentication, multiple captcha options, and a customizable login page designer.
Key Features
- Brute-Force Protection: Limits the number of failed login attempts from a single IP address and automatically locks out attackers after configurable thresholds are reached.
- Cloud Blacklists and Whitelists: Maintain IP access lists across all managed sites from a single dashboard. Block or allow IP addresses globally rather than per-site.
- Bot Protection: Detects and blocks automated bots from accessing login forms using honeypot traps and server-level rules without requiring user interaction.
- Firewall: A lightweight server-level firewall based on the G7 firewall with several hundred rules spread across 11 modules to protect against malicious requests, bad bots, automated attacks, and spam.
- Two-Factor Authentication (2FA): Sends a confirmation email after each login attempt, adding a second verification layer even if credentials are compromised.
- Captcha Integration: Supports multiple captcha types including Google reCAPTCHA v2 and v3, hCaptcha (GDPR-compliant), and a built-in captcha that requires no API key.
- Customizable Login Page: Choose from preset design templates or customize the WordPress login page to match your brand identity.
- Editable Login URL: Change the default WordPress login URL to prevent attackers from finding the login page.
- Country Blocking: Block or allow login attempts based on geographic location at the country level.
- Activity Logs: Track detailed login activity including IP addresses, usernames, countries, and timestamps for all attempts.
- Centralized Dashboard: Manage all purchases, licenses, sites, and cloud blacklists from a single web-based console.
- White-Label Mode: Rebrand the plugin interface for client deployments (Team and Agency plans).
Pricing
WP Login Lockdown offers a free version on WordPress.org and three lifetime PRO plans sold directly through the official website. All PRO plans include lifetime updates, lifetime support, and all current and future plugin features. A 7-day money-back guarantee applies to all purchases.
- Personal Lifetime: $89 (discounted from $159) for 1 site license. Includes all PRO features, cloud blacklists, and dashboard access. White-label mode and rebranding are not included.
- Team Lifetime: $99 (discounted from $199) for 5 site licenses. Includes everything in Personal plus white-label mode. Rebranding is not included.
- Agency Lifetime: $179 (discounted from $299) for 100 site licenses. Includes all features, white-label mode, and full rebranding capabilities.
The plugin is also available on AppSumo with lifetime deals starting at $59 for 5 sites (1 code), $118 for 50 sites (2 codes), and $177 for unlimited sites (3 codes). AppSumo purchases include a 60-day money-back guarantee and allow stacking up to 3 codes.
Technical Details
WP Login Lockdown operates entirely in the WordPress admin area and does not load any assets on the front-end, which means it has no measurable impact on site performance or page speed. The plugin does not make permanent changes to the WordPress installation; disabling the plugin reverses all its settings. It leverages .htaccess rules for server-level blocking and is compatible with WooCommerce and Cloudflare. The plugin supports WordPress multisite installations and integrates with other WebFactory Ltd products through the shared Dashboard.
Target Audience
This plugin is designed for WordPress site owners, web design agencies managing multiple client sites, IT and security agencies, and small businesses seeking straightforward login protection. The centralized dashboard and white-label features make it particularly suitable for agencies that need to manage security across dozens or hundreds of WordPress installations from a single interface.
Affiliate Program
WP Login Lockdown and its parent company WebFactory Ltd do not offer a public affiliate or referral program at this time. The WebFactory Ltd website does not list an affiliate program, and no partner or referral portal was found across the WP Login Lockdown site or associated WebFactory properties.
