For years, I used Limit Login Attempts on all my websites to make it harder for potential attackers to brute-force their way into my login page. The original developer discontinued the plugin, which was forked and continued as Limit Login Attempts Reloaded. Over time, the plugin became increasingly intrusive, constantly drawing attention in the WordPress admin area to advertise paid add-ons.
What I really wanted was a plugin that prevents brute-force attacks by adding a delay after several failed login attempts. After growing dissatisfied with Limit Login Attempts Reloaded, I decided to build my own plugin to do exactly what I needed: Protect Login.
Continue reading