Description
At a glance
Limit Login Attempts v1.7.2 is a free WordPress plugin with 300K+ active installs, 4.6/5 rating from 202 reviews, updated April 4, 2023, requires WordPress 2.8+. Download the latest GPL version below — free, with live demo included.
Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Features
- Limit the number of retry attempts when logging in (for each IP). Fully customizable
- Limit the number of attempts to log in using auth cookies in same way
- Informs user about remaining retries or lockout time on login page
- Optional logging, optional email notification
- Handles server behind reverse proxy
- It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.
Frequently asked questions
What do I get when I download Limit Login Attempts?
Limit Login Attempts 1.7.2 is the latest version. It is a WordPress plugin you can download here free of charge under the GPL license, with the complete feature set included and no trial limitations. It holds a 4.6/5 rating from 202 user reviews.
Does Limit Login Attempts cost anything?
No. Limit Login Attempts 1.7.2 is 100% free — the full GPL version, not a trial or demo. There are no download limits, no accounts to create, and no upsells during the download.
How do I install Limit Login Attempts 1.7.2?
Download the ZIP file from this page, then in your WordPress dashboard go to Plugins → Add New → Upload Plugin, choose the file, click Install Now, then Activate. The plugin works immediately after activation — no license key or extra setup is required for the core features.
What are the requirements for Limit Login Attempts?
Limit Login Attempts 1.7.2 requires WordPress 2.8 or higher. Most modern WordPress hosts already meet these versions. Running older versions may cause features to break, so update WordPress and PHP first if your site is behind.
When was Limit Login Attempts last updated?
Version 1.7.2 was last updated on April 4, 2023. This page is refreshed automatically, so the download here always matches the newest version we have verified.
Is the Limit Login Attempts download safe?
The file is sourced directly from the official WordPress.org repository — the same file the developer published. It is served unmodified, so what you install here is byte-identical to the official release.
Version: 1.7.2
Updated: October 1, 2026
Technical details
| Version | 1.7.2 |
|---|---|
| Last updated | April 4, 2023 |
| Active installs | 300,000+ |
| Rating | ★★★★★ 4.6/5 (202 reviews) |
| Requires WordPress | 2.8 or higher |
| Author | Automattic |
| Tags | authentication, login, security |
Demo Limit Login Attempts
Download Limit Login Attempts
Download Limit Login Attempts WP PluginNote: if the download does not start, disable your ad blocker and try again.
