The Stealth Login Plugin, Improves WordPress Security
Today's post is about utilizing the Stealth Login and Login LockDown plugins, to improve WordPress security. As you know, WordPress is the world’s most popular blogging platform used by bloggers, around the world. However, WordPress, out-of-the-box, has some security flaws that need to be dealt with. The security issue that I am going to talk about today is the default, login page, URL.
You should be aware of, "WordPress" by default, allows unlimited login attempts. This creates a security threat in its self and makes it easy for hackers to launch a brute-force attack, to steal your login details. Because of this, you need to take precautions secure your WP Blog. This can be done quite easily with two plugins, "Stealth Login" and "Login LockDown".
Stealth Login:
The "Stealth Login" plugin for WordPress allows you to customize your WP login URL, logout and register links. The plugin secures your blog in a way, that even if the hacker were able to crack your login password, your WordPress login page, and its URL, would be difficult to find.
The plugin could encourage hackers to give a try! However, that can be prevented by using the LockDown plugin.
Example of the WordPress default login page URL: http://www your-blog-name.com/wp-login.php
Example of the WordPress modified login page URL: http://www your-blog-name.com/no-hack-login
The Stealth Login is a free plugin that is offered to WordPress users. Therefore, if your blog gets a lot of hacking attempts, this plugin will rectify the problem.
Login LockDown:
The "Login LockDown" plugin functions exceptionally well as stated by its author. It adds an extra layer of security to WordPress by restricting the failed logins attempts, from a given IP range. The plugin also has an option to the settings page that allows you to show the intruder, that your blog has the LockDown plugin installed.
The Login LockDown plugin records the IP address, time and date stamp of the intruder, and all failed attempts of logging in. Once the intruder has failed the several attempts that are allotted, their IP address is disabled temporarily.
The Stealth Login Plugin, Improves WordPress Security
Here is another related article on the same topic from Wikipedia:
Stealth Login Plugin
