Security & access

Decide who skips the password, stop guessing attacks and control session length.

  1. 01 Who can skip the password Stop asking people who should not have to type it.
  2. 02 Harden against password guessing Stop someone working through password guesses against your site.
  3. 03 Sessions and Remember me Decide whether visitors re-enter the password every visit, or stay unlocked for weeks.
  4. 04 Feed and REST API protection Both default to on, including on sites upgrading from an earlier version.
  5. 05 Activity reports (PRO) Get told about failed attempts without checking manually.
Still stuck? Free support runs in the WordPress.org forum so answers help everyone.
Open a support thread