Online Everything Secure Login
Custom login address : wp-login.php and wp-admin show a 404 page to visitors who do not know your login address. Login limits : after a few wrong passwords (5 by default) an IP address is locked for a while (15 minutes by default). 2-step email codes : after the password, chosen roles enter a 6-digi
- Custom login address : wp-login.php and wp-admin show a 404 page to visitors who do not know your login address.
- Login limits : after a few wrong passwords (5 by default) an IP address is locked for a while (15 minutes by default).
- 2-step email codes : after the password, chosen roles enter a 6-digit code sent to their email. Trusted devices can skip it for 30 days.
- Hardening : hide the WordPress version, switch off XML-RPC, stop user enumeration, add security headers and more, each with its own switch.
- Login log : every successful and failed login, with the user, IP address and time.
If you are ever locked out, add define( 'OESL_OFF', true ); to wp-config.php to switch the plugin off.
External services
This plugin does not connect to any outside service. 2-step codes are sent with WordPress’s own email function.
- 01Upload the online-everything-secure-login folder to /wp-content/plugins/ and activate the plugin.
- 02Go to Settings → Online Everything Secure Login , choose your login address and save it somewhere safe.
- 03Turn on the protections you want.
Frequently asked questions.
I forgot my login address.
Add define( 'OESL_OFF', true ); to wp-config.php, log in at /wp-login.php, look up the address in the settings and remove the line again.
Does the 2-step code need an app?
No. The code is sent by email, so make sure your site’s emails arrive (for example with OE Mail SMTP).
