Admin Login Guard & Branding

• Secure your admin login with email-based OTP (One-Time Password).
• Premium, beautifully designed HTML email templates for 2FA codes.
• Built-in “Resend Code” functionality with a smart 60-second anti-spam timer.

Email Notifications : Receive alerts for admin lockouts and when users log in from new IP addresses. IP Blacklisting : Permanently block known malicious IP addresses. Modern Settings Interface : Enjoy a beautiful, responsive, and easy-to-use admin dashboard for all your configurations. Advanced Customizations : Inject custom CSS, JavaScript, specify custom fonts, and add a custom footer to the login page.

Privacy & Data Collection

This plugin respects your privacy. Both the diagnostic tracking and deactivation feedback features are 100% optional .

Telemetry & Diagnostics (Opt-in Only)

Upon activation, you will be invited to share anonymous site diagnostics. This is strictly opt-in and can be disabled at any time from the ‘Privacy’ tab in settings. If you agree, we collect:

• WordPress, PHP, and Plugin version numbers.
• Theme name/version and locale.
• Multisite status and a hashed site identifier.
• No personal data, user information, or site content is collected.

Deactivation Feedback

If you decide to deactivate the plugin, a feedback modal will appear. Providing feedback is entirely optional —you can click “Skip & Deactivate” to deactivate the plugin immediately without sharing any data. You may optionally share your name and email address if you wish to be contacted for support.

Data Security

All collected data is encrypted using AES-256-CBC before being transmitted to our secure receiver server.

External services

This plugin connects to external APIs operated by Code and Core to support optional telemetry diagnostics and optional deactivation feedback. Both services are entirely opt-in / optional.

1. Telemetry / Diagnostics receiver

This plugin connects to an API to send anonymous site-health data, it’s needed to help prioritize compatibility updates. It sends the Site URL, plugin name & version, PHP version, WordPress version, active theme name & version, site language, multisite status, and a Unix timestamp every time the plugin is activated, deactivated, or updated, ONLY if the administrator has explicitly opted in. This service is provided by “Code and Core”: privacy policy .

2. Deactivation feedback receiver

This plugin connects to an API to receive voluntary feedback, it’s needed when a site administrator chooses to share a reason for deactivating the plugin. It sends Deactivation reason, optional details, Site URL, plugin name & version, PHP version, WordPress version, active theme name & version, site language, multisite status, and a timestamp ONLY when the administrator clicks “Submit Feedback” in the deactivation modal. Name and email are sent only if the contact checkbox is checked. This service is provided by “Code and Core”: privacy policy .

All data transmitted to endpoints on wordpress-plugins.pro is encrypted with AES-256-CBC before sending.

Credits

• This plugin uses DataTables for displaying login history.