Login protection
Login protection is available for all Patchstack paid plan users.
Protection is available for WordPress sites only.
To manage your WordPress site’s login protection, and set up 2FA (two factor authentication) for it, navigate to Sites > yourdomain.com > Hardening > Login protection in Patchstack App.
On the Login protection subpage you can:
- Block access to default /wp-admin page and set up a custom login URL
- Ban IPs that fail on multiple login attempts
- Set a specific time, where in between users can log in to WordPress
- Enable WordPress users to set up the 2FA from WordPress profile page
- Add IP addresses to WordPress login whitelist
- Block certain IP addresses from being able to log into WordPress
How our custom login URL feature works
Section titled “How our custom login URL feature works”If you define a new URL for login, it works like a security token for your wp-admin. Entering your custom URL once, will whitelist your IP to access regular wp-admin URL again.
Example usage:
Section titled “Example usage:”Let’s say you enter “myadmin” to the New URL field.
To log in to your WordPress admin panel, you need to:
- First visit your secret URL (for example yourdomain.com/myadmin)
- Your IP gets whitelisted
- You can now log in from the regular yourdomain.com/wp-admin again
- Other visitors are blocked from wp-admin page, unless they know your security token (in this case /myadmin)