Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.
Alternatives to Lock and Key
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Secure your WordPress login with two-factor authentication (2FA) using any TOTP authenticator app — no external services, no bloat.
Enterprise WordPress login security with 2FA, WebAuthn passkeys, risk scoring, analytics, file integrity, and vulnerability scanning.
Change your WordPress login URL to a custom slug, with optional IP whitelist and trusted device management for enhanced security.
A simple, secure 2FA plugin that adds a verification screen after login, requiring a code from your authenticator app.
Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.
Modern login design, a custom login URL, and optional authenticator two-factor protection with QR setup and recovery codes.
Security and upkeep with sensible defaults: login limits, two-factor login, hardening, plain-words checks, backups and updates with a backup first.
Design your login page in the block editor, with passkeys, two-factor authentication and lockout protection built in.