Protect WP Login

FAQ

How does Protect WP Login differ from WordPress login credentials?

The Protect WP Login plugin uses basic authentication via .htaccess to protect the login process before the WordPress login screen is displayed, ensuring that unauthorized users are blocked by the server itself, reducing the load on WordPress and the database. In contrast, WordPress login credentials are checked by WordPress after the login page is loaded.

How do I add a new user?

Go to the ‘Protect WP Login’ page under the admin menu, enter a username and password, and click ‘Save’.

How do I delete a user?

On the same page, find the username you want to delete, and in the ‘Actions’ column, click ‘Delete’.

Do I need a complex username and password for the authentication prompt?

No, even with a simple username and password, the plugin blocks unauthorized access attempts before they reach WordPress. This prevents bots from causing unnecessary server load, as they are stopped at the server level without WordPress or the database needing to process the request.

How does the plugin help reduce server resource consumption?

The plugin adds an authentication layer that activates before the WordPress login page is loaded. This means any brute force or unauthorized access attempt is blocked at the server level. By preventing WordPress and the database from processing bot requests, server resource consumption is significantly reduced.

Does the plugin affect website performance?

No, it actually improves it. By blocking unauthorized access attempts before they reach WordPress, the plugin reduces server load. This leads to fewer database queries and less CPU usage, improving the overall performance of the website.

Do I need to enter the username and password every time I access the login page?

Depending on your browser settings, it might store the username and password entered in the authentication prompt. This means that on future visits, the browser can automatically fill in the information, avoiding the need to re-enter it every time.

What happens if a bot makes multiple incorrect login attempts?

The plugin works with the server to block these attempts before they reach WordPress. Depending on your server’s security settings, multiple failed attempts may trigger firewall rules that permanently block the attacker’s IP, ensuring no further resource consumption.

How can I save the username and password from the prompt in the browser (for example, in Chrome)?

To save the username and password from the prompt in Chrome, you can follow these steps:

1. When the prompt appears asking for a username and password, enter the correct credentials.
2. After successfully entering the username and password, Chrome will prompt you with a pop-up at the top of the screen asking if you’d like to “Save password”.
3. Click “Save” to ensure Chrome remembers these credentials for future sessions.

With this process, the next time you access the protected WordPress login page, Chrome will automatically fill in the username and password for the prompt, saving you from manually entering them each time.