Comment on WordPress Login Cool Down – Stops brute force attacks on WordPress the easy way by Keith Davis.
Hi Paul
Clever idea and I note that you recommend a cooldown period of 30 seconds.
The default setup on the WSF plugin is 5 seconds.
Do you think that 5 seconds is too short?
I’m using WSF plugin on all my sites.
Easy to setup, full of great features and good support in the WordPress forum.
Recent Comments by Keith Davis
We’re removing the old WordPress plugin vulnerability scanner from Shield
“We’ll clear-up exactly why we’re doing this and what your new vulnerability scanning options are.”
Look forward to hearing from you when you have a final timetable of events.
Get The Shield! Our WordPress Security Firewall Goes Pro
Hi Paul
I’ve always loved the Simple Firewall and recommend it to all my WordPress user friends.
Sounds as though you guys are going head to head with WordFence, Sucuri and iThemes Security… is that right?
My problem is that I don’t use iControlWP so I may have to go the “What if you don’t want to use iControlWP? Contact us and share your case with us.” route.
I’ll follow the comments to see how things progress.
Automatically Block XML-RPC Brute Force Amplification Attacks Against WordPress
Thanks Paul
Just updating WSF on all my sites and disabling XML-RPC
Keith
How To Add 2-Factor Authentication Login To Your WordPress Sites
Sorry for second question Paul, but can you try this out on a local install say using XAMPP?
How To Add 2-Factor Authentication Login To Your WordPress Sites
Hi Paul
I use the WordPress Simple Firewall plugin and I’m thinking of activating this feature.
I don’t have a dedicated IP address so I’m wondering if this will cause me problems each time I log in or will I simply have to use the email method…
“This email will contain a verification link that you must click in order to verify the IP address and your username.”
Regards
