Get Started
Loginizer Pro featured image

Loginizer Pro v2.1.3 - WordPress Security Plugin

Developer: LoginizerCategory: WordPress PluginsTrusted with 77 downloadsPro5 favoritesLatest v2.1.3Updated 2d ago

Loginizer is a WordPress plugin which helps you fight against bruteforce attack by blocking login for the IP after it reaches maximum retries allowed.

Related items

Related Security Plugins

Complianz Premium – GDPR/CCPA Cookie Consent icon

Complianz Premium - GDPR/CCPA Cookie Consent

by Real Big Plugins

Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, LGPD, POPIA, APA, RGPD, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results...

reCaptcha for WooCommerce icon

ReCaptcha For WooCommerce - WordPress Plugin

by Woo

Security is the most important concern nowadays for any website or an eCommerce store.

Wordfence Premium icon

Wordfence Premium - WordPress Security Plugin

by Defiant Inc

Wordfence Premium is for self-administered websites that are looking for the ultimate protection against the latest exploits including real-time firewall rules and malware signature, a continuously...

Loginizer is a WordPress plugin which helps you fight against bruteforce attack by blocking login for the IP after it reaches maximum retries allowed. You can blacklist or whitelist IPs for login using Loginizer. You can use various other features like Two Factor Auth, reCAPTCHA, PasswordLess Login, etc. to improve security of your website.

Loginizer is actively used by more than 1000000+ WordPress websites.

You can find our official documentation at https://loginizer.com/docs. We are also active in our community support forums on wordpress.org if you are one of our free users.

Free Features :

  • Brute force protection. IPs trying to brute force your website will be blocked for 15 minutes after 3 failed login attempts. After multiple lockouts the IP is blocked for 24 hours. This is the default configuration and can be changed from Loginizer -> Brute force page in WordPress admin panel.
  • Failed login attempts logs.
  • Blacklist IPs
  • Whitelist IPs
  • Custom error messages on failed login.
  • Permission check for important files and folders.

GET SUPPORT AND PRO FEATURES

Pro Features :

Show full description
  • MD5 Checksum – of Core WordPress Files. The admin can check and ignore files as well.
  • PasswordLess Login – At the time of Login, the username / email address will be asked and an email will be sent to the email address of that account with a temporary link to login.
  • Two Factor Auth via Email – On login, an email will be sent to the email address of that account with a temporary 6 digit code to complete the login.
  • Two Factor Auth via App – The user can configure the account with a 2FA App like Google Authenticator, Authy, etc.
  • Login Challenge Question – The user can setup a Challenge Question and Answer as an additional security layer. After Login, the user will need to answer the question to complete the login.
  • reCAPTCHA – Google’s reCAPTCHA v3/v2 can be configured for the Login screen, Comments Section, Registration Form, etc. to prevent automated brute force attacks. Supports WooCommerce as well.
  • Rename Login Page – The Admin can rename the login URL (slug) to something different from wp-login.php to prevent automated brute force attacks.
  • Rename WP-Admin URL – The Admin area in WordPress is accessed via wp-admin. With loginizer you can change it to anything e.g. site-admin
  • Rename Login with Secrecy – If set, then all Login URL’s will still point to wp-login.php and users will have to access the New Login Slug by typing it in the browser.
  • Disable XML-RPC – An option to simply disable XML-RPC in WordPress. Most of the WordPress users don’t need XML-RPC and can disable it to prevent automated brute force attacks.
  • Rename XML-RPC – The Admin can rename the XML-RPC to something different from xmlrpc.php to prevent automated brute force attacks.
  • Username Auto Blacklist – Attackers generally use common usernames like admin, administrator, or variations of your domain name / business name. You can specify such username here and Loginizer will auto-blacklist the IP Address(s) of clients who try to use such username(s).
  • New Registration Domain Blacklist – If you would like to ban new registrations from a particular domain, you can use this utility to do so.
  • Change the Admin Username – The Admin can rename the admin username to something more difficult.
  • Auto Blacklist IPs – IPs will be auto blacklisted, if certain usernames saved by the Admin are used to login by malicious bots / users.
  • Disable Pingbacks – Simple way to disable PingBacks.
  • Blocks IP after maximum retries allowed
  • Extended Lockout after maximum lockouts allowed
  • Email notification to admin after max lockouts
  • Blacklist IP/IP range
  • Whitelist IP/IP range
  • Check logs of failed attempts
  • Create IP ranges
  • Delete IP ranges
  • Licensed under LGPLv2.1
  • Safe & Secure

Features in Loginizer include:

Recent releases

Release history

View all 10 versions
v2.1.3LatestVerified Safe
Oct 29, 2026348.0 KB
* [Security] Fixed a security issue in the HybridAuth library used by Social Login. [Reported by Nathan Cross (CyberBadger)] * [Feature Pro] Passkeys: You can now log in to your website using passkeys, making authentication faster, easier, and more secure without the hassle of passwords. * [Improvement Pro] Microsoft Social Login now identifies users by their Microsoft account ID instead of their email. The first Microsoft login to an account, or a registration, is now confirmed with a code sent to the user's email. * [Improvement] Social Login error messages are now escaped before being shown on the login page. * [Improvement] The Backuply install option now requires the install plugins capability. * [Bug-Fix Pro] Resetting the 2FA app secret key is now only possible from the 2FA settings page, that has been fixed. * [Bug-Fix Pro] 2FA emergency codes were not always removed after use, that has been fixed. * [Bug-Fix Pro] Username enumeration protection was not blocking all variations of the REST users endpoint, that has been fixed. * [Bug-Fix Pro] Users were not able to save their account settings on the Ultimate Member account page, that has been fixed. * [Bug-Fix] Social Login now refuses a login when the provider returns an invalid email, instead of sanitizing it. * [Bug-Fix] Login notification email was causing a fatal error when Really Simple Security 2FA was used, that has been fixed. * [Bug-Fix] Security settings page input fields would show empty fields when saved, this has been fixed.
Sep 28, 2026308.6 KB
View changelog
* [Improvement Pro] Added Code Signing: Every update now verifies the code signature to ensure secure updates.
Aug 18, 2026300.8 KB
View changelog
* [Pro Feature] User enumeration protection, hiding unauthenticated access to username lists. * [Improvement Pro] Passwordless login, now have option to disable username based login and only allow login through email. * [Improvement Pro] The plugin now comes with Italian translations(it_IT). * [Bug-Fix Pro] Passwordless login, was not honoring Remember me on login, this has been fixed. * [Bug-Fix] There was a race condition happening in Bruteforce protection, that has been fixed.

Frequently asked questions

Is Loginizer Pro GPL licensed?
Yes, Loginizer Pro is distributed under the GNU General Public License (GPL). You can legally use, modify, and redistribute it on unlimited websites.
What is the latest version of Loginizer Pro?
The latest version of Loginizer Pro on GPLCoffee is v2.1.3 (released Oct 29, 2026, 348.0 KB download size). Every new release is synced automatically, and subscribers can update directly from their WordPress dashboard with the one-click connector plugin.
How much does Loginizer Pro cost on GPLCoffee?
Loginizer Pro is available for $5.99 for a 1-year license or $15.99 for a lifetime license. Membership plans also include credit-based access so you can download Loginizer Pro along with thousands of other plugins, themes, and PHP scripts for a single subscription.
Which WordPress and PHP versions does Loginizer Pro support?
The current release of Loginizer Pro requires WordPress 3.0 or higher, tested up to WordPress 7.1, PHP 5.5 or higher. Per-release compatibility details are listed in the version history.
Is Loginizer Pro safe to download?
Yes. The latest release of Loginizer Pro (v2.1.3) was scanned with VirusTotal and came back clean. Scan results are visible on each version page, and releases flagged as malicious are blocked from the catalog.

Auto-updates included

Install it once, update automatically.

The GPLC Connector installs this plugin from your wp-admin and rolls out new versions to your connected sites. Included with every membership plan: 10 to 40 connected sites depending on the plan (Lite 10, Pro 20, Geek and Lifetime 40).