Geosec
Geosec is a lightweight security plugin designed to protect your WordPress administration panel ( wp-admin ). It works by detecting the visitor’s country using their IP address and allowing access only if they are in your “Allowed Countries” whitelist. This significantly hardens your admin panel aga
Geosec is a lightweight security plugin designed to protect your WordPress administration panel ( wp-admin ). It works by detecting the visitor’s country using their IP address and allowing access only if they are in your “Allowed Countries” whitelist.
This significantly hardens your admin panel against brute-force attacks, bot login attempts, and unauthorized access from foreign countries.
Key Features
- Whitelist-based Protection: Only allow access from specific countries.
- Emergency Key: Create a unique URL to bypass the lock if you are traveling.
- Cloudflare Compatible: Works seamlessly with Cloudflare and standard server setups.
- Detailed Statistics: View logs of blocked attempts and valid logins, including Top Blocked Countries and IPs.
- Lightweight: Optimized for performance, querying external APIs only when necessary and caching results.
Screenshots & previews.
- 01Upload the geosec folder to the /wp-content/plugins/ directory.
- 02Activate the plugin through the ‘Plugins’ menu in WordPress.
- 03Go to Settings -> Geosec to configure allowed countries.
- 04IMPORTANT: Add your CURRENT country to the allow list before activating the protection.
Frequently asked questions.
What happens if I lock myself out?
If you configured an Emergency Key, you can use the special URL (e.g., yoursite.com/?geosec_bypass=YOURKEY ) to gain access. If you didn’t, you can manually rename the geosec folder in wp-content/plugins/ via FTP to disable the plugin.
