Block brute-force login attempts by integrating with Cloudflare's firewall to automatically block IPs after failed logins.
Alternatives to Phantom User Lockout
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
OrioleOne Master Guardv1.1.2
All-in-one WordPress security with brute-force protection, hardening controls, and a clear failed login audit log.
Security Hardenerv2.4.7
Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.
Webboll Securityv2.9.20
Behavior-first WordPress security: custom login URLs, brute-force protection, 2FA, threat engine, activity logging and more.
LogiSheild Security with 2FA, limit login, custom login URL, and temp login is your go-to login security plugin for WordPress.
Counts failed logins and locks out the address that keeps guessing, with a log of what was tried and a longer lockout each time.
Local password-login protection with temporary connection limits and a privacy-conscious activity summary. No account or license key required.
Nahnu Login Shieldv1.0.15
Hyperfocused login security. CAPTCHA, brute-force lockout, geo-blocking, 2FA, honeypot, and edge WAF — all from one screen. 100% free.
Vortix Web Securityv2.2.0
Free, offline-first WordPress security hardening with 15 configurable protection modules and a 20-point local security scan.