Title: Melapress Login Security
Author: Melapress
Published: <strong>23 Febbraio 2023</strong>
Last modified: 9 Febbraio 2026

---

Ricerca i plugin

![](https://ps.w.org/melapress-login-security/assets/banner-772x250.png?rev=3328142)

![](https://ps.w.org/melapress-login-security/assets/icon-256x256.png?rev=3328142)

# Melapress Login Security

 Di [Melapress](https://profiles.wordpress.org/melapress/)

[Scarica](https://downloads.wordpress.org/plugin/melapress-login-security.2.3.0.zip)

 * [Dettagli](https://it.wordpress.org/plugins/melapress-login-security/#description)
 * [Recensioni](https://it.wordpress.org/plugins/melapress-login-security/#reviews)
 * [Sviluppo](https://it.wordpress.org/plugins/melapress-login-security/#developers)

 [Supporto](https://wordpress.org/support/plugin/melapress-login-security/)

## Descrizione

** COMPREHENSIVE WORDPRESS LOGIN SECURITY PLUGIN **

[Melapress Login Security](https://melapress.com/wordpress-login-security/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)
enables you to effortlessly set login security policies that put you firmly in the
driver’s seat of your WordPress sites. Policies are highly customizable and granular
and can be implemented by user role or site-wide for complete control over the security
of your WordPress login processes.

Use the free edition of Melapress Login Security to implement WordPress password
requirements such as minimum length and complexity rules. The plugin also allows
you to set password expiration policies, prevent password reuse, limit failed login
attempts, and automatically disable inactive user accounts, among other things. 
This helps you:

 * Prevent unauthorized login attempts
 * Protect against brute force attacks
 * Comply with GDPR with a login consent notice

### 🔐 Features list

A secure WordPress login starts right here. Explore all of the features included
with the free edition of [Melapress Login Security](https://melapress.com/wordpress-login-security):

### Set password policies

Strong passwords are your first line of defense against bad actors looking to gain
access to your site. Set password requirement policies to make sure users set strong
passwords. Set policies by user role or site-wide and define policy priority for
users with multiple roles.

 * Set minimum password length
 * Require uppercase and lowercase characters, numbers, and special characters
 * Set an automatic password expiration policy and advise users when their password
   is about to expire
 * Disallow users from reusing passwords
 * Provide users with helpful instructions during the password configuration stage
 * Disable password reset links
 * Mandate WordPress password reset on the first login

### Limit login attempts

[Limit failed login attempts](https://melapress.com/support/kb/melapress-login-security-failed-logins-policy-wordpress/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)
and put an end to brute force attacks. Protect your login form by automatically 
disabling user accounts after a number of failed login attempts. Choose between 
manual unlocking by an admin or automatic unlocking after a cooldown period.

### Temporary login without password

Provide temporary and secure login access to third parties, like developers, editors,
employees or others, without a password. It works by providing the user with a temporary
login link that expires after a certain amount of time, or after a number of uses.
This prevents you from having to create new user accounts manually, while simultaneously
reducing the security risks associated with old, unused user accounts.

### Change WordPress login URL

Easily deploy security-by-obscurity tactics and change your WordPress login page
URL using a plugin! Hiding the default login page from hackers makes it more difficult
to find, potentially reducing brute force attacks and other unauthorized access 
attempts. After you change the default wp-admin URL, you can set a 404 for the old
login page or redirect it to any page of your choosing.

### Limit login page access by IP address(es)

Limit access to the WordPress login page by IP address(es) for additional security.

### GDPR login page consent notice

Easily meet GDPR requirements by adding a GDPR consent notice to the login page.
This is required for GDPR and PCI DSS compliance, thus ensuring your WordPress site
login page is in compliance.

### Emergency password reset

Discovered suspicious behavior? Reset all users’ passwords with just one click and
regain instant control.

### Upgrade to Melapress Login Security Premium and get even more benefits.

The premium edition of Melapress Login Security comes bundled with even more features,
which enable you to take your WordPress website login security to the next level.
Disable inactive WordPress user accounts and force passwords to be reset once accounts
have been unlocked. Inactive accounts can be managed within a single dashboard for
increased efficiency and faster response times. Moreover, you can set accounts to
be locked out after a number of failed login attempts and customize the duration
and method of unlocking them.

### Premium features list

 * **Everything included in the free edition**
 * **Manually lock user accounts** to immediately prevent login access for rarely
   used accounts or users on extended leave
 * **Add an extra security layer with security questions** users must answer when
   performing sensitive actions such as password resets and account unlocks
 * **Receive email alerts for unrecognized device logins**, with the option to remotely
   terminate the session
 * **Control user session duration** by extending or shortening session timeouts
   to balance security and convenience
 * **One-click integration with third-party plugins** such as WooCommerce, LearnDash,
   MemberPress, and many others
 * **Automatically [disable inactive WordPress users](https://melapress.com/inactive-users-wordpress/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)**
   after a configurable period of inactivity
 * **Apply Geo-blocking rules** to allow or block login access based on specific
   countries
 * **[Restrict users’ login to specific IP addresses](https://melapress.com/support/kb/melapress-login-security-limit-login-ips/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)**,
   including support for multiple allowed IPs
 * **[Restrict WordPress user login times](https://melapress.com/support/kb/restrict-users-log-in-time-wordpress-website/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)**
   by day and/or hours
 * **Limit login credentials** to email address, username, or both
 * **Add a GDPR consent notice** to the WordPress login page
 * **View detailed user security reports**, including last activity, password age,
   and expired passwords
 * **Receive weekly email summary reports** covering password resets, password changes,
   user account lockouts, and more

|💎 [UPGRADE TO PREMIUM](https://melapress.com/wordpress-login-security/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)
|

### Why you should use Melapress Login Security

Melapress Login Security is a WordPress plugin built from the ground up to help 
you improve the security of your user accounts and secure your WordPress login. 
Supercharge login credentials for maximum effectiveness and put a stop to unlimited
login attempts, weak passwords, and inactive users. Set up policies to reduce your
attack surface area such as login times restrictions, change the WordPress login
URL, and much more.

### Free and premium support

Support for the free edition of Melapress Login Security is free on the [WordPress support forums](https://wordpress.org/support/plugin/melapress-login-security/).
Premium world-class support via one-to-one email is available to the Premium users–
[upgrade to premium](https://melapress.com/wordpress-login-security/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)
to benefit from priority support.

For any other queries, feedback, or if you simply want to get in touch with us, 
please use our [contact form](https://melapress.com/contact/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls).

#### MAINTAINED & SUPPORTED BY MELAPRESS

Melapress builds high-quality WordPress security & admin plugins such as [WP 2FA](https://melapress.com/wordpress-2fa/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls),
[Melapress Role Editor](https://melapress.com/wordpress-user-roles-editor/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls),
and [WP Activity Log](https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls),
the #1 user-rated activity log plugin for WordPress.

[Visit our website](https://melapress.com/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)
to see how our plugins can help you better manage and improve the security and administration
of your WordPress websites and users.

### Install the plugin from within WordPress

Keeping a secure WordPress login page is easy with [Melapress Login Security](https://melapress.com/wordpress-login-security).
Simply:

 1. From your WordPress dashboard, navigate to Plugins > Add New
 2. Search for “[Melapress Login Security](https://melapress.com/wordpress-login-security)”
 3. Install & activate [Melapress Login Security](https://melapress.com/wordpress-login-security)
    from your Plugins page

### Install the plugin manually (via file upload)

 1. Download the plugin from the WordPress plugins repository
 2. Unzip the zip file and upload the folder to the `/wp-content/plugins/` directory
 3. Activate the Melapress Login Security plugin through the Plugins page in WordPress

## Screenshot

 * [[
 * The configurable login security policies in the plugin.
 * [[
 * The plugin is highly configurable, allowing you to fine tune the plugin’s functionality
   to fit your requirements.
 * [[
 * You can configure different login security policies for every user role, or exclude
   the role from the policies, or simply inherit the site-wide policies for every
   role.
 * [[
 * Change the login page URL as a security hardening technique, restrict access 
   via IP address(es), and also add a GDPR consent message, which is required by
   PCI DSS and GDPR compliance regulations.
 * [[
 * Easily create temporary secure logins without passwords that automatically expire
   after a specific period or a number of use.
 * [[
 * In the Premium edition you can also limit the traffic to the login page by country
   or a number of countries.
 * [[
 * Users are notified when their password expires.
 * [[
 * It is very easy for a user to know what their password should include or not 
   because the policies which are not met when setting a new password are highlighted
   in red.
 * [[
 * In the Premium edition you can also restrict the number of IP addresses a user
   can log in from, allowing you to easily control account sharing and boost user
   security.
 * [[
 * In the Premium edition the Reports allow you to see the last time users were 
   active, the last time they reset their password, and those users with an expired
   password.

## FAQ

### Where can I go for further reading and documentation?

You can find more detailed information about WordPress website security, password
security and user management, security best practices, and much more in the recommended
reads linked below:

 * [WordPress Password Policy: Enforcing strong passwords](https://melapress.com/wordpress-password-policy)
 * [WordPress security & hardening – the definitive guide](https://melapress.com/wordpress-security)
 * [The definitive guide to WordPress security plugins](https://melapress.com/best-wordpress-security-plugins)

### Is Melapress Login Security free?

Melapress Login Security comes in both free and premium editions. The free edition
comes packed with several security measure features to protect your WordPress login,
including:

 * Password policies for all your users
 * Limit login attempts
 * Change login URL
 * GDPR login page notification

The premium edition adds features such as:

 * Login times restrictions
 * Inactive users policies
 * IP restrictions
 * Geo-blocking
 * One-click integration with WooCommerce, Memberpress, LearnDash, and others
 * and much more!

### What is the difference between free and premium?

The free edition includes all basic features without any restrictions to help you
improve your WordPress login security. The premium edition adds several features
over and above what is available in the free edition, enabling you to improve your
WordPress login security even further.

### Can I get support if I get stuck?

Support for the Free edition of the plugin is provided only via the WordPress.org
support forums. You can also refer to our [support pages](https://melapress.com/support/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls)
for all the technical and product documentation.

If you are using the Premium edition, you get direct access to our support team 
via one-to-one [email support](https://melapress.com/support/submit-ticket/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=mls).

### How does Melapress Login Security secure my website?

Melapress Login Security secures different aspects of the WordPress login process
to increase the overall security of your site. Depending on which edition you get
and which policies you activate, the plugin is flexible enough to enable you to 
be as restrictive as you like.

While the plugin is extensive, it is not a silver bullet, and you should still take
other security measures, such as enabling two factor authentication.

### How does limiting login attempts improve security?

Brute force attacks rely on unlimited login attempts to try as many username and
password combinations as possible until they hit the right combination. By limiting
login attempts, you effectively stop brute force attacks by removing the one thing
they rely on to breach your login page.

### How effective is changing the default WordPress login URL?

Changing the login page URL is a security technique known as security-by-obscurity.
Its entire premise is to make resources harder to find – but not impossible. This
means that changing the wp-admin page URL can be an effective strategy when combined
with other techniques such as using strong passwords and two factor authentication.

### Does the plugin receive updates?

Melapress Login Security is actively supported and receives regular updates. Refer
to the plugin changelog for more information about past updates.

### How do I uninstall Melapress Login Security?

You can uninstall Melapress Login Security just as easily as you would with any 
other plugin. Simply login to your WP admin dashboard, navigate to Plugins > Installed
Plugins, locate Melapress Login Security, and then click on Deactivate and then 
Uninstall.

To remove all settings, navigate to Login Security > Settings and enable the Delete
database data upon uninstall setting before deactivating and uninstalling the plugin.

### What data does Melapress Login Security send?

The free edition does not send any data whatsoever. The premium edition, on the 
other hand, only sends licensing data to our server. All WordPress login security
settings remain in your WordPress database. Furthermore, the plugin does not collect
any user data.

### How can I report security bugs?

You can report security bugs through the Patchstack Vulnerability Disclosure Program.
Please use this [form](https://patchstack.com/database/vdp/melapress-login-security).
For more details please refer to our [Melapress plugins security program](https://melapress.com/plugins-security-program/).

## Recensioni

![](https://secure.gravatar.com/avatar/a74a917c4b4adc877b14426ec710113f65ac2587ea61af62195bc136c83440f5?
s=60&d=retro&r=g)

### 󠀁[Great support](https://wordpress.org/support/topic/great-support-6552/)󠁿

 [lgm23](https://profiles.wordpress.org/lgm23/) 3 Marzo 2026 1 risposta

Very useful plugin and very helpful support team.

![](https://secure.gravatar.com/avatar/d77da09e583e1566e62273a5270a884532349a7304b61f04956dfd6b4a919f5d?
s=60&d=retro&r=g)

### 󠀁[Must have plugin in your wordpress stack](https://wordpress.org/support/topic/must-have-plugin-in-your-wordpress-stack/)󠁿

 [whiteelephantagency](https://profiles.wordpress.org/whiteelephantagency/) 26 Novembre
2025 1 risposta

Easy to use, very stable and great price. Overall pretty great value for a plugin
that is underrated.

![](https://secure.gravatar.com/avatar/81b69c5873188210eee334ac6d92242bb57ff899f9006d1e74644fa26414fd4e?
s=60&d=retro&r=g)

### 󠀁[MelaPress Login – Great Plugin – Great Support](https://wordpress.org/support/topic/melapress-login-great-plugin-great-support/)󠁿

 [DICT Admin](https://profiles.wordpress.org/dicomptech/) 15 Settembre 2025 1 risposta

We have been using the Plugin for a while and received great Support with clear 
Communication. The Plugin does what it is supposed too. You will have peace of find
when purchasing this Plugin.

![](https://secure.gravatar.com/avatar/f9bcc5840707ed02dedbdc590401ae858fb23aa0f5bd540adc7688d504f9b7f9?
s=60&d=retro&r=g)

### 󠀁[Excellent Plug-In with Excellent Support](https://wordpress.org/support/topic/excellent-plug-in-with-excellent-support-4/)󠁿

 [totallyminimad](https://profiles.wordpress.org/totallyminimad/) 25 Giugno 2025
1 risposta

This is a great plug-in to enhance security and also works alongside Melapress 2FA
plug-in where others do not. Great response from support too. Thank you!

![](https://secure.gravatar.com/avatar/a5a46678813e9a0392052373445c359ae4c3ca48e807a65db3e6aaaf0693708d?
s=60&d=retro&r=g)

### 󠀁[A very good plugin and excellent support](https://wordpress.org/support/topic/tres-bon-plugin-et-excellent-support-3/)󠁿

 [delemo](https://profiles.wordpress.org/delemo/) 25 Marzo 2026 1 risposta

A very good plugin that offers some really useful options for fine-tuning connection
access. The support team is also very responsive.

![](https://secure.gravatar.com/avatar/5bfb3dbe47a382dd9b69cdee45002e1365eeaac43eae980dcad04576f63caa5e?
s=60&d=retro&r=g)

### 󠀁[Awesome plugin](https://wordpress.org/support/topic/awesome-plugin-7368/)󠁿

 [kacper3355](https://profiles.wordpress.org/kacper3355/) 25 Aprile 2025 1 risposta

Great plugin to enhance your WP security. Works as intended, keep up the good work!
Thanks.

 [ Leggi tutte le recensioni di 17 ](https://wordpress.org/support/plugin/melapress-login-security/reviews/)

## Contributi e sviluppo

“Melapress Login Security” è un software open source. Le persone che hanno contribuito
allo sviluppo di questo plugin sono indicate di seguito.

Collaboratori

 *   [ Melapress ](https://profiles.wordpress.org/melapress/)

“Melapress Login Security” è stato tradotto in 3 lingue. Grazie a [chi traduce](https://translate.wordpress.org/projects/wp-plugins/melapress-login-security/contributors)
per il contributo.

[Traduci “Melapress Login Security” nella tua lingua.](https://translate.wordpress.org/projects/wp-plugins/melapress-login-security)

### Ti interessa lo sviluppo?

[Esplora il codice](https://plugins.trac.wordpress.org/browser/melapress-login-security/)
segui il [repository SVN](https://plugins.svn.wordpress.org/melapress-login-security/),
segui il [log delle modifiche](https://plugins.trac.wordpress.org/log/melapress-login-security/)
tramite [RSS](https://plugins.trac.wordpress.org/log/melapress-login-security/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 2.3.0 (2026-01-26)

 * **New features**
    - Added a new feature to manually lock users and prevent them from logging in.
    - Added a new setting in the Temporary logins setting to exclude temp users 
      from 2FA enforcement.
    - Implemented a custom plugin deactivation form to assist with user feedback
      collection.
    - Implemented a new setting that allows admins to control the number of password
      reset emails sent on login attempts to user with expired passwords.
 * **Plugin improvements**
    - Refactored the Freemius SDK licensing components for better maintainability.
    - Improved the help texts across multiple plugin pages and fixed some typos 
      and made them more consistent and clear.
    - Updated some URLs in the Free edition “Premium features” page, and added a
      few more help texts across the plugin.
 * **Bug fixes**
    - Fixed: A visual bug affecting Reports page when there are no users present
      in the tabs.
    - Fixed: A variety of user-reported PHP warnings Warning: Attempt to read property“
      ID” on false inside /class-failed-logins.php.
    - Fixed: User exclusion dropdown on Settings page now correctly extracts user
      suggestion while typing.
    - Fixed: an edge case where unlocked users with WP 2FA could login without required
      password reset.
    - Fixed: Fixed a few bugs related to the “Reset all users” feature affecting
      email deliverability of password reset emails.
    - Fixed: a user-reported Fatal error: Uncaught TypeError: strtotime(): inside/
      app/class-melapress-login-security.php on line 497.
    - Fixed: {reset_url} tag now correctly generates password reset URL in email
      templates.
    - Fixed: Password expiry notice showing again after dismissal when “show again”
      option is disabled.

Refer to the complete plugin changelog for more detailed information about what 
was new, improved and fixed in previous version updates of Melapress Login Security.

## Plugin commerciali

Questo plugin è gratuito, ma offre aggiornamenti e supporto addizionali a pagamento.
[Vai al supporto](https://melapress.com/support/)

## Meta

 *  Versione **2.3.0**
 *  Ultimo aggiornamento **2 mesi fa**
 *  Installazioni attive **2.000+**
 *  Versione WordPress ** 5.5 o superiore **
 *  Testato fino alla versione **6.9.4**
 *  Versione PHP ** 7.3 o superiore **
 *  Lingue
 * [Dutch](https://nl.wordpress.org/plugins/melapress-login-security/), [Dutch (Belgium)](https://nl-be.wordpress.org/plugins/melapress-login-security/),
   [English (US)](https://wordpress.org/plugins/melapress-login-security/), e [Polish](https://pl.wordpress.org/plugins/melapress-login-security/).
 *  [Traduci nella tua lingua](https://translate.wordpress.org/projects/wp-plugins/melapress-login-security)
 * Tag
 * [Brute Force](https://it.wordpress.org/plugins/tags/brute-force/)[limit login attempts](https://it.wordpress.org/plugins/tags/limit-login-attempts/)
   [limit logins](https://it.wordpress.org/plugins/tags/limit-logins/)[login](https://it.wordpress.org/plugins/tags/login/)
   [login security](https://it.wordpress.org/plugins/tags/login-security/)
 *  [Visualizzazione avanzata](https://it.wordpress.org/plugins/melapress-login-security/advanced/)

## Valutazioni

 5 su 5 stelle.

 *  [  17 recensioni a 5-stelle     ](https://wordpress.org/support/plugin/melapress-login-security/reviews/?filter=5)
 *  [  0 recensioni a 4-stelle     ](https://wordpress.org/support/plugin/melapress-login-security/reviews/?filter=4)
 *  [  0 recensioni a 3-stelle     ](https://wordpress.org/support/plugin/melapress-login-security/reviews/?filter=3)
 *  [  0 recensioni a 2-stelle     ](https://wordpress.org/support/plugin/melapress-login-security/reviews/?filter=2)
 *  [  0 recensioni a 1-stelle     ](https://wordpress.org/support/plugin/melapress-login-security/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/melapress-login-security/reviews/#new-post)

[Vedi tutte le recensioni](https://wordpress.org/support/plugin/melapress-login-security/reviews/)

## Collaboratori

 *   [ Melapress ](https://profiles.wordpress.org/melapress/)

## Supporto

Hai qualcosa da dire? Ti serve aiuto?

 [Chiedi nel forum di supporto](https://wordpress.org/support/plugin/melapress-login-security/)