Limit Login Attempts — WordPress Security Plugin
Limit Login Attempts (Spam Protection)
by wp-buy · WordPress.org page
Limit Login Attempts has 200+ active installs on WordPress.org and 14,498 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on June 15, 2025, tested up to WordPress 6.8.8.
Limit Login Attempts at a glance
Is Limit Login Attempts well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Limit the number of retry attempts when logging in
- Configurable lockout timings
- Email notification of blocked attempts (Detailed email containing all necessary information)
- Notify the user of remaining attempts
- Report containing all blocked attempts
- Whitelist/Blocklist of IPs (Support IP ranges)
- Allow/Block Countries
- Automatically block IP addresses that exceed limit login attempts
- Automatically add IP addresses that exceed blocks limit to the deny list
- Send notifications about blocked retry (Email sent to admins)
- Inform the user about the remaining retries or lockout time on the login page
- Unlock The Locked users – Easily unlock the locked admin through the email or dashboard
Limit Login Attempts reviews and ratings
7 reviews on WordPress.org, with the most recent ones as their authors posted them.
7 reviews
- 5★
-
5
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
2
-
Lockout Option Apparently Not Working
I contacted my server host for help because this plugin keeps telling me that my site is under possible brute-force attack. I change lockout settings to lockout for 4 days following a failed attempt, but this plugin's log was still apparently filling up with failed attempts and lockouts for the same couple of accounts that shouldn't have been possible if it was doing it's job. So I provided a list of IP addresses to my server host, and they checked logs at the server level and said there was no sign that any of those IP addresses had attempted to log into the site. I uninstalled the plugin.
thecelticcroft -
Saving My Postie's Bacon
With this tool I realize that after two weeks of being live our site has had world renown popularity. Every Continet, evey country and sovergnty has recognized us, yet only 6 out of 171 of our council members have signed on to use our site. Thank you for showing me this.
rickgravelin -
Very useful and easy to use
A good solution if you don't use heavier plugins like WordFence or Ithemes Security.
bonaventuradibello -
Quick Support & Excellent Plugin
Really a helpful plugin. Support is very active too.
ahmednabubaker -
Great plugin
Working fine, thank you.
mohmmed alagha -
Did not work for me. Doesn't lock out after x failed attempts.
Installed it to try dealing with brute force attacks and it successfully logs all failed attempts but never locked them out. Yes, it was enabled and set to 3 invalid logins. Lockout period was increased too but they kept coming. Uninstlled.
bigfly
Details
Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
The full description, screenshots and every review live on the WordPress.org page.
Rankings Limit Login Attempts competes in
Tags
- anti-spam
- firewall
- Login Attempts
- protection
- security
More from wp-buy
-
All 404 Redirect to Homepage 200,000+ installs -
WP Content Copy Protection & No Right Click 100,000+ installs -
Visitor Traffic Real Time Statistics 30,000+ installs -
SEO Redirection 10,000+ installs
- Version
- 5.6
- Last updated
- Jun 15, 2025
- First published
- Feb 20, 2020
- Requires WordPress
- 4.6
- Tested up to
- 6.8.8
- Requires PHP
- 7.2
- Pricing
- Free on WordPress.org
Limit Login Attempts FAQ
What does Limit Login Attempts do?
According to its WordPress.org readme, Limit Login Attempts offers Limit the number of retry attempts when logging in, Configurable lockout timings, Email notification of blocked attempts (Detailed email containing all necessary information), Notify the user of remaining attempts and Report containing all blocked attempts.
How many active installs does Limit Login Attempts have?
WordPress.org reports 200+ active installs for Limit Login Attempts as of September 7, 2026.
Is Limit Login Attempts still maintained?
The last release was on June 15, 2025, more than a year ago. WordPress.org shows a warning on plugins that go this long without an update.
Is Limit Login Attempts free?
Limit Login Attempts is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.