Active installations30Adoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Defyn Security Manager – Hide Login, 2FA & Brute-Force Protection version 1.2.2 as active, updated 17d ago and tested up to WordPress 7.1.
Overview
About this plugin
Defyn Security Manager is a lightweight WordPress security plugin that hides your login page and locks down the back end. php. Defyn Security Manager moves that door, throttles attackers, adds two-factor authentication, and records every attempt so you always know who is knocking.
No bloat, no upsell walls, and no account required. Install it, choose a secret login slug, and your login page disappears from bots and scanners.
What it does
Hide the WordPress login URL. Replace /wp-admin and /wp-login.php with any custom login URL you choose, so automated bots and brute-force scripts hit a dead end.
Decoy or 404 the old URLs. Decide what attackers see at the original login addresses: a 404, a redirect, or a decoy login screen.
Brute-force protection. Limit login attempts and automatically lock out IP addresses after repeated failures, with a one-click control to clear active lockouts.
Two-factor authentication (2FA). Add TOTP-based two-factor authentication using Google Authenticator, Authy, 1Password, Microsoft Authenticator or Bitwarden, complete with backup codes and per-role enforcement.
REST API and XML-RPC protection. Extend two-factor enforcement to the REST API and XML-RPC, with optional API hiding to shrink your attack surface.
Time-window access control. Only allow logins during the hours and days you actually work, and block everything else.
IP allowlisting. Optionally restrict back-end access to trusted IP addresses or CIDR ranges.
Activity log and audit trail. See login attempts, lockouts, scans of your old login URLs, and settings changes in one searchable log.
Email alerts. Get notified about lockouts, scans, and logins from new IP addresses.
Why choose Defyn Security Manager
Fast and focused. A purpose-built login-security and login-hardening plugin, not a heavyweight suite that slows your site down.
Recovery built in. A documented emergency kill switch means you can never permanently lock yourself out.
Privacy friendly. Your data stays on your site. Nothing is sent to a third-party service.
Built by an agency. Maintained by Defyn, an Australian web design and development studio that runs this plugin on client sites every day.
Defyn Security Manager is ideal for anyone who wants to hide wp-admin, stop brute-force login attempts, limit login attempts, add 2FA to WordPress, and keep a clear security audit trail.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
brute force
hide login
two factor
security
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 5.8 · PHP 7.4
Update activity16 Oct 202617d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
WordPress compatibility6.8.8→7.1.3
Version1.2.1→1.2.2
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
