Password protect wp-login.php with HTTP Basic Authentication. Stops bots and brute force attacks at the server, before WordPress even loads.
Alternatives to .htaccess Site Access Control
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
WebDmitriev Protectionv1.0.0
Lightweight security module, attack protection, and file integrity monitoring.
Lunexia Security – .htaccess Shield, Firewall, Two Factor Authentication (2FA) & Malware Protectionv3.2.2
Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.
Protect your WordPress login page by moving /wp-login.php to a secret URL, with a fully customizable Access Denied page and live preview.
Hide your login page behind a secret URL, limit login attempts, and block brute force attacks. Includes lockout thresholds and instant email alerts.
Check plugin compatibility and repository health, track updates, roll back WordPress.org plugins, and download installed versions as ZIP files.
Selective maintenance and service-status control for WordPress. Keep unaffected parts online with up to three independent Service Zones.
Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.
Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.