{"id":248485,"date":"2025-11-12T17:29:37","date_gmt":"2025-11-12T17:29:37","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/brutefort\/"},"modified":"2026-05-28T09:01:50","modified_gmt":"2026-05-28T09:01:50","slug":"brutefort","status":"publish","type":"plugin","link":"https:\/\/fon.wordpress.org\/plugins\/brutefort\/","author":22047680,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.0.8","stable_tag":"0.0.8","tested":"7.0","requires":"5.0","requires_php":"7.4","requires_plugins":null,"header_name":"BruteFort","header_author":"Y0000el","header_description":"BruteForce Protection for WordPress with IP Restriction, Whitelist & Blacklist Management.","assets_banners_color":"746f77","last_updated":"2026-05-28 09:01:50","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/brutefort.com\/","header_author_uri":"https:\/\/yoyallimbu.com.np","rating":5,"author_block_rating":0,"active_installs":0,"downloads":448,"num_ratings":3,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"0.0.1":{"tag":"0.0.1","author":"y0000el","date":"2025-11-12 17:29:12"},"0.0.2":{"tag":"0.0.2","author":"y0000el","date":"2025-11-12 18:02:32"},"0.0.3":{"tag":"0.0.3","author":"y0000el","date":"2025-11-14 03:38:15"},"0.0.4":{"tag":"0.0.4","author":"y0000el","date":"2025-11-14 09:57:02"},"0.0.5":{"tag":"0.0.5","author":"y0000el","date":"2025-11-14 10:47:17"},"0.0.6":{"tag":"0.0.6","author":"y0000el","date":"2025-11-19 18:14:34"},"0.0.7":{"tag":"0.0.7","author":"y0000el","date":"2025-11-19 18:30:09"},"0.0.8":{"tag":"0.0.8","author":"y0000el","date":"2026-05-28 09:01:50"}},"upgrade_notice":{"0.0.6":"<p>Major update! New features: Custom Login URL to hide wp-login.php and Geo Blocking for country-based restrictions. Improved UI and critical bug fixes.<\/p>","0.0.5":"<p>Bug fix release for setup wizard compatibility.<\/p>","0.0.1":"<p>Initial release with login protection, IP whitelist\/blacklist, and brute force detection.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":3},"assets_icons":{"icon-128x128.gif":{"filename":"icon-128x128.gif","revision":3395457,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.gif":{"filename":"icon-256x256.gif","revision":3395457,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3395457,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3395457,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.8"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3395457,"resolution":"1","location":"assets","locale":"","width":1920,"height":1034},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3395457,"resolution":"2","location":"assets","locale":"","width":1920,"height":1034},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3395457,"resolution":"3","location":"assets","locale":"","width":1920,"height":1034},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3395457,"resolution":"4","location":"assets","locale":"","width":1920,"height":1034},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3395457,"resolution":"5","location":"assets","locale":"","width":1920,"height":1034}},"screenshots":{"1":"Dashboard Overview - Rate Limit Settings","2":"Custom Login URL Settings - Hide wp-login.php","3":"Geo Blocking Settings - Country-based restrictions","4":"IP Whitelist\/Blacklist Management","5":"Real-time Login Attempt Logs","6":"Dark Mode Interface Support"}},"plugin_section":[],"plugin_tags":[2439,3760,242487,139270,15756],"plugin_category":[54],"plugin_contributors":[250619],"plugin_business_model":[],"class_list":["post-248485","plugin","type-plugin","status-publish","hentry","plugin_tags-brute-force","plugin_tags-custom-login-url","plugin_tags-geo-blocking","plugin_tags-ip-restriction","plugin_tags-login-protection","plugin_category-security-and-spam-protection","plugin_contributors-y0000el","plugin_committers-y0000el"],"banners":{"banner":"https:\/\/ps.w.org\/brutefort\/assets\/banner-772x250.png?rev=3395457","banner_2x":"https:\/\/ps.w.org\/brutefort\/assets\/banner-1544x500.png?rev=3395457","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/brutefort\/assets\/icon-128x128.gif?rev=3395457","icon_2x":"https:\/\/ps.w.org\/brutefort\/assets\/icon-256x256.gif?rev=3395457","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/brutefort\/assets\/screenshot-1.png?rev=3395457","caption":"Dashboard Overview - Rate Limit Settings"},{"src":"https:\/\/ps.w.org\/brutefort\/assets\/screenshot-2.png?rev=3395457","caption":"Custom Login URL Settings - Hide wp-login.php"},{"src":"https:\/\/ps.w.org\/brutefort\/assets\/screenshot-3.png?rev=3395457","caption":"Geo Blocking Settings - Country-based restrictions"},{"src":"https:\/\/ps.w.org\/brutefort\/assets\/screenshot-4.png?rev=3395457","caption":"IP Whitelist\/Blacklist Management"},{"src":"https:\/\/ps.w.org\/brutefort\/assets\/screenshot-5.png?rev=3395457","caption":"Real-time Login Attempt Logs"}],"raw_content":"<!--section=description-->\n<p><strong>BruteFort<\/strong> is your WordPress site's complete login security solution focused on four core protections: <strong>Rate Limit<\/strong>, <strong>Custom Login URL<\/strong>, <strong>Geo Blocking<\/strong>, and <strong>IP Restriction<\/strong>.<\/p>\n\n<p>Protect against brute force attacks, hide your login page with a custom URL, block countries with geo rules, and control access using IP whitelists\/blacklists - all in one lightweight, performance-optimized plugin.<\/p>\n\n<p>Whether you're running a blog, a WooCommerce store, or a membership site, BruteFort keeps bots, hackers, and unauthorized users out while maintaining fast page speeds.<\/p>\n\n<h4>\ud83d\udd10 Core Security Features<\/h4>\n\n<p><strong>\ud83d\udee1\ufe0f Rate Limit &amp; Brute Force Protection<\/strong>\n- Limit repeated login attempts per IP\n- Configure attempt windows and lockout duration\n- Apply progressive lockouts for repeated abuse\n- Reduce automated credential stuffing and bot attacks<\/p>\n\n<p><strong>\ud83d\udd17 Custom Login URL (Hide wp-login.php)<\/strong>\n- Replace the default <code>\/wp-login.php<\/code> endpoint with your custom slug\n- Return 404 for direct <code>wp-login.php<\/code> requests\n- Reduce scanner and bot traffic on known login endpoints\n- Keep login access private for authorized users<\/p>\n\n<p><strong>\ud83c\udf10 Geo Blocking (Country-Based Restrictions)<\/strong>\n- Block or allow login attempts by country\n- Blacklist mode: Block specific countries from accessing wp-login.php\n- Whitelist mode: Only allow login from selected countries\n- IP geolocation detection (Cloudflare compatible)\n- Perfect for region-specific sites or blocking high-risk countries<\/p>\n\n<p><strong>\ud83d\udccd IP Restriction (Whitelist &amp; Blacklist)<\/strong>\n- Enforce custom IP allow\/deny rules for login protection\n- Add individual IPs or CIDR ranges\n- Instantly block suspicious IPs\n- Whitelist your own IP to prevent lockouts\n- Bulk IP management with easy interface<\/p>\n\n<p><strong>\ud83d\udcca Real-Time Monitoring &amp; Logs<\/strong>\n- View failed login attempts in real-time\n- Track IP addresses, usernames, and timestamps\n- Filter logs by status, date, or IP\n- Manual unlock for accidentally locked users\n- Export logs for security audits<\/p>\n\n<p><strong>\u26a1 Performance &amp; Compatibility<\/strong>\n- Lightweight and performance-optimized\n- Works with Cloudflare, proxy servers, and CDNs\n- Compatible with most security plugins\n- Dark mode UI support\n- No impact on page load speeds<\/p>\n\n<h4>\ud83c\udfaf Perfect For<\/h4>\n\n<ul>\n<li><strong>WooCommerce stores<\/strong> protecting customer data and preventing unauthorized access<\/li>\n<li><strong>Membership sites<\/strong> restricting access by geographic location<\/li>\n<li><strong>Corporate websites<\/strong> blocking countries where business doesn't operate<\/li>\n<li><strong>Blog owners<\/strong> hiding login page from automated bots and scanners<\/li>\n<li><strong>Agencies<\/strong> managing multiple client sites with different security requirements<\/li>\n<li><strong>High-traffic sites<\/strong> experiencing frequent brute force attacks<\/li>\n<li><strong>International sites<\/strong> wanting region-specific login restrictions<\/li>\n<\/ul>\n\n<h4>\ud83d\ude80 Why Choose BruteFort?<\/h4>\n\n<ul>\n<li><strong>Core protection stack<\/strong>: Rate Limit + Custom Login URL + Geo Blocking + IP Restriction<\/li>\n<li><strong>Easy to use<\/strong>: Simple, intuitive interface with no complex configuration<\/li>\n<li><strong>Performance-focused<\/strong>: Minimal resource usage, no site slowdown<\/li>\n<li><strong>SEO-friendly<\/strong>: Properly handles redirects and 404s<\/li>\n<li><strong>Privacy-conscious<\/strong>: No external API calls for basic features (optional geo API)<\/li>\n<li><strong>Regular updates<\/strong>: Actively maintained with new features added regularly<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin files to the <code>\/wp-content\/plugins\/brutefort<\/code> directory, or install the plugin through the WordPress plugin screen directly.<\/li>\n<li>Activate the plugin through the 'Plugins' screen in WordPress<\/li>\n<li>Go to <strong>Settings &gt; BruteFort<\/strong> to configure IP restrictions, whitelist\/blacklist, and login attempt limits.<\/li>\n<li>Navigate to <strong>Custom Login URL<\/strong> tab to set up a custom login slug and hide wp-login.php<\/li>\n<li>Use <strong>Geo Blocking<\/strong> tab to block or allow countries from accessing your login page<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20this%20plugin%20slow%20down%20my%20site%3F\"><h3>Does this plugin slow down my site?<\/h3><\/dt>\n<dd><p>No. BruteFort is lightweight and optimized for performance, with minimal impact on page load times.<\/p><\/dd>\n<dt id=\"how%20does%20the%20custom%20login%20url%20feature%20work%3F\"><h3>How does the custom login URL feature work?<\/h3><\/dt>\n<dd><p>BruteFort creates a custom slug (e.g., \/secure-login) for your login page and automatically blocks access to \/wp-login.php, returning a 404 error to unauthorized users.<\/p><\/dd>\n<dt id=\"what%20is%20geo%20blocking%20and%20how%20does%20it%20work%3F\"><h3>What is Geo Blocking and how does it work?<\/h3><\/dt>\n<dd><p>Geo Blocking restricts login attempts based on the visitor's country. You can either blacklist specific countries (block mode) or whitelist only allowed countries (allow mode). It uses IP geolocation to detect the user's location.<\/p><\/dd>\n<dt id=\"can%20i%20whitelist%20my%20own%20ip%20address%3F\"><h3>Can I whitelist my own IP address?<\/h3><\/dt>\n<dd><p>Yes! Add your IP to the whitelist to ensure you're never locked out, even if other restrictions are active.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20i%20forget%20my%20custom%20login%20url%3F\"><h3>What happens if I forget my custom login URL?<\/h3><\/dt>\n<dd><p>You can disable the custom login URL feature via FTP by deactivating the plugin, or by accessing your database to change the setting.<\/p><\/dd>\n<dt id=\"does%20geo%20blocking%20work%20with%20vpns%20or%20proxy%20servers%3F\"><h3>Does Geo Blocking work with VPNs or proxy servers?<\/h3><\/dt>\n<dd><p>Yes, BruteFort is compatible with Cloudflare and most proxy servers. It checks the CF-IPCountry header first, then falls back to IP-based geolocation.<\/p><\/dd>\n<dt id=\"is%20this%20compatible%20with%20other%20security%20plugins%3F\"><h3>Is this compatible with other security plugins?<\/h3><\/dt>\n<dd><p>Yes. BruteFort works alongside most WordPress security plugins like Wordfence, iThemes Security, and All In One WP Security.<\/p><\/dd>\n<dt id=\"can%20i%20block%20entire%20countries%20from%20logging%20in%3F\"><h3>Can I block entire countries from logging in?<\/h3><\/dt>\n<dd><p>Yes! The Geo Blocking feature lets you select specific countries to block or allow for login attempts.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.0.8 - 28\/05\/2025<\/h4>\n\n<ul>\n<li>Fix   - Wordpress 7.0 support.<\/li>\n<\/ul>\n\n<h4>0.0.7 - 20\/11\/2025<\/h4>\n\n<ul>\n<li>Fix   - Removed extra tags and shortened extra long short descriptions.<\/li>\n<\/ul>\n\n<h4>0.0.6 - 19\/11\/2025<\/h4>\n\n<ul>\n<li>Feature - <strong>Custom Login URL<\/strong>: Hide wp-login.php and create custom login slugs<\/li>\n<li>Feature - <strong>Geo Blocking<\/strong>: Block or allow login attempts by country (blacklist\/whitelist mode)<\/li>\n<li>Feature - Complete country list (249 countries) for geo-blocking<\/li>\n<li>Enhance - Unified card-based UI design across all settings pages<\/li>\n<li>Enhance - Improved toggle switches and form controls<\/li>\n<li>Enhance - Better dark mode support throughout the plugin<\/li>\n<li>Fix - LogsService type error causing fatal errors on live sites<\/li>\n<\/ul>\n\n<h4>0.0.5 - 14\/11\/2025<\/h4>\n\n<ul>\n<li>Fix - Entry already exists issue on setup wizard<\/li>\n<\/ul>\n\n<h4>0.0.4 - 14\/11\/2025<\/h4>\n\n<ul>\n<li>Feature \u2013 Basic Setup wizard<\/li>\n<li>Enhance - Refresh option on logs page<\/li>\n<li>Fix - Dark mode design update on datatable and modals<\/li>\n<li>Fix - Unlock feature for locked users<\/li>\n<\/ul>\n\n<h4>0.0.3 - 13\/11\/2025<\/h4>\n\n<ul>\n<li>Fix \u2013 Settings redirect from all plugins page<\/li>\n<li>Fix - Compatibility with 7.4<\/li>\n<\/ul>\n\n<h4>0.0.2 - 12\/11\/2025<\/h4>\n\n<ul>\n<li>Fix \u2013 Autoload not working issue<\/li>\n<\/ul>\n\n<h4>0.0.1 - 12\/11\/2025<\/h4>\n\n<ul>\n<li>Initial release \u2013 login protection, IP whitelist\/blacklist, brute force detection<\/li>\n<\/ul>","raw_excerpt":"BruteFort - Rate Limit, Custom Login URL, Geo Blocking &amp; IP Restriction for complete WordPress login security.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/248485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=248485"}],"author":[{"embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/y0000el"}],"wp:attachment":[{"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=248485"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=248485"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=248485"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=248485"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=248485"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/fon.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=248485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}