WordPress Login Page Plugin All In One Login helps you protect and customize your WordPress login experience. Change the login URL, add Email 2FA or Email OTP, block or allow IPs, review activity logs, and style the login page with templates. Documentation | Pro features Looking for a one-stop solut
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 6.2 and PHP 7.4.
SourceWordPress plugins · Nov 4, 2026
01 / Source details
Aboutthistool.
WordPress Login Page Plugin
All In One Login helps you protect and customize your WordPress login experience. Change the login URL, add Email 2FA or Email OTP, block or allow IPs, review activity logs, and style the login page with templates.
Documentation | Pro features
Looking for a one-stop solution to secure and customize your WordPress login page (wp-login.php)? If that’s what you need, you’re in the right place.
Over 60,000 website owners use All In One Login to secure and customize their WordPress login pages. 🎉
The reason is obvious! 👇 All In One Login is a complete WordPress login security plugin that helps you secure and customize your WordPress login page with security features and customization options. 🤯
From changing the WordPress login URL to integrating Google reCAPTCHA, All In One Login offers features to help protect and customize your WP login page. Isn’t that amazing? Wait until you see its amazing features! 😃 👇
Key Features Our Users Love About All In One Login (Free + Pro)
The All in One Login plugin includes all the essential features that ensure the best WordPress login protection and customization.
Free Version Includes the Following Features: 👇
Wp-login.php URL Customization Secure your site by changing the default wp-login.php URL. Hide the WordPress login page from hackers and prevent unauthorized access with a simple custom login URL
Google reCAPTCHA Protect your WordPress login page from spam and bots. Add Google reCAPTCHA v2 or v3 to your WP-Admin for secure authentication and reduce automated login attempts.
Login and Logout Redirection Control where users are redirected after login and logout by creating custom redirection rules for all users, user roles, or specific users.
Login Page Customizer Transform your WordPress login page with live preview customization. Change logos, colors, backgrounds, and layouts without coding.
User Enumeration Protection Block attackers from discovering WordPress usernames through author or query string requests. This prevents exposure of valid usernames and strengthens login security against brute-force attacks.
Login Security Dashboard Manage your login security settings from a centralized dashboard. View recent successful and failed login attempts, monitor locked-out IP addresses, and access features such as custom login URLs, limit login attempts, two-factor authentication (2FA), and IP blocking.
Email OTP Login Allow users to sign in securely using a one-time verification code sent to their email address. This provides a passwordless login experience while reducing the risks associated with weak or compromised passwords.
Login Activity Logs Keep track of all login attempts and activity logs for enhanced security monitoring. See the username, IP address, date, time, lockout list, and more.
Disable Common Usernames Block weak or predictable usernames to improve WordPress login security. Force unique usernames and prevent attackers from exploiting common entries on your WordPress site.
Ban User/IP Address Block unwanted users or IP addresses instantly. Restrict access to your WordPress login page and protect WP-Admin from hackers using this IP and user ban plugin.
Whitelist IP Addresses Allow only trusted IP addresses to access your WordPress login page. Restrict WP-Admin access to selected users, adding an extra security layer to your site.
Email-Based 2FA Add an extra security layer with email one-time passwords (OTP). Users receive a 6-digit verification code via email during login, no authenticator app required.
✨Pro Version Unlocks (everything in Free, plus):
2FA Backup Codes & Grace Period Never get locked out! Generate one-time backup codes and set grace periods for a smooth 2FA rollout across your user base.
Slack Security Notifications Receive real-time WordPress security alerts directly in Slack. Monitor failed logins, IP lockouts, and suspicious activity.
Webhook Notifications Connect with Zapier, Make, n8n, or custom APIs. Send security events to HTTPS endpoints for automated monitoring and workflows.
Login Templates Choose from professionally designed login page templates. Apply modern, minimalist, or professional designs instantly.
Google Fonts Integration Access over 1,900 Google Fonts to match your login page typography with your brand. Customize fonts across all login elements.
WooCommerce Login Integration Enable social login and passwordless Login Links on WooCommerce account and checkout pages. Support Google, Facebook, Apple, Discord, Microsoft, and LINE.
Social Login Integration Allow users to sign in with Google, Facebook, Microsoft, or LINE. Simplify WordPress and WooCommerce registration while improving the login experience.
hCaptcha Protect your WordPress login page from bots and spam with privacy-focused, enterprise-grade verification that helps keep user data secure.
App-Based 2FA Add two-factor authentication to WordPress login. Protect WP-Admin by ensuring that users verify their identity before accessing your site.
Temporary Login URLs (Passwordless Login) Generate temporary login URLs for specific users. Control link expiration and the number of visits to provide secure, short-term access without sharing passwords.
Password Strength Checker Enforce strong WordPress passwords by setting minimum length, character requirements, and uppercase and lowercase rules to improve login security.
Limit Login Attempts Prevent brute-force attacks by limiting failed login attempts. Lock out users after repeated failures to protect your WordPress login page.
SMS OTP Login Allow users to authenticate using one-time verification codes sent by SMS through Twilio integration for a secure, passwordless login experience.
Login Link (Magic Link) Let users sign in using a secure, one-click link sent to their email. Simplify authentication and reduce login and checkout friction.
User Enumeration Logs Track attempts to discover WordPress usernames. Review recorded activity to identify suspicious behavior and investigate potential security threats.
5+ Social Login Options Allow users to sign in using existing social accounts, including Google, Facebook, Microsoft, LINE, GitHub, Apple, and Discord.
Google Social Login Let users sign in with their Google accounts for faster registration and a simpler login experience.
Facebook Social Login Enable familiar Facebook authentication to simplify user onboarding and reduce registration friction.
Microsoft Social Login Provide secure Microsoft authentication for business and education-focused websites, making login easier for users who already use Microsoft services.
GitHub Social Login Allow developers and technology professionals to sign in with their GitHub accounts, making it ideal for developer communities and technical websites.
Apple Social Login Offer Sign in with Apple for convenient, privacy-focused authentication, allowing users to protect their email addresses.
Discord Social Login Allow Discord users to sign in with one click. Ideal for gaming communities, creator platforms, and community-driven websites.
LINE Social Login Enable LINE authentication for websites targeting audiences in regions where LINE is widely used.
WordPress Multisite Network Compatibility
WordPress Multisite Support Manage login security and customization across your WordPress Multisite network. Use supported login protection and customization features to help secure access to your network’s websites.
Why Choose All In One Login for WordPress Login Security and Customization? 👇
WordPress Login Security Change your login URL, block unwanted users and IP addresses, and restrict login access to trusted IP addresses.
Brute-Force Protection Limit failed login attempts and help prevent automated login attacks.
Login Page Customization Customize your WordPress login page with templates, logos, backgrounds, colors, and fonts.
Bot Protection Integrate Google reCAPTCHA or hCaptcha to help protect your login page against bots and automated attacks.
Login Activity Monitoring Monitor login attempts, IP addresses, lockouts, and user enumeration events to identify suspicious activity.
Two-Factor Authentication (2FA) Add email-based or authenticator app verification, with backup codes and additional access controls.
Passwordless Login Let users sign in using email OTPs, SMS OTPs, temporary login URLs, or one-click login links.
Social Login Allow users to sign in using supported providers, including Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE.
Login and Logout Redirection Redirect users to specific pages after login or logout based on their roles or individual accounts.
Security Notifications Receive security alerts through Slack or external services using webhooks.
WooCommerce Login Integration Enable supported social login and passwordless authentication options on WooCommerce account and checkout pages.
WordPress Multisite Compatibility Apply supported login security and customization features across your WordPress Multisite network.
Password Policy Controls Configure password strength requirements to help users create stronger and more secure passwords.
External Services
Third-Party Services We Use
All In One Login connects to third-party services to provide optional features. These services may process certain information when you enable and use the related features. Services marked “Pro plugin only” are used only when the separate AIO Login Pro plugin is installed and the related feature is enabled.
Google reCAPTCHA
Helps protect your WordPress login page from bots and automated login attempts. When enabled, Google may process your IP address, browser information, and verification data.
Service: Google reCAPTCHA
Privacy Policy: Google Privacy Policy
Terms of Service: Google Terms of Service
hCaptcha (Pro plugin only)
Helps detect bots and automated activity on your WordPress login page when enabled in AIO Login Pro. When enabled, the Pro plugin communicates with hCaptcha to verify user interactions.
All In One Login is a WordPress login security and customization plugin that helps protect your website from unauthorized access. It includes features such as custom login URLs, brute-force protection, two-factor authentication, passwordless login, social login, and login page customization.
Can I receive security alerts in Slack?
Yes. All In One Login Pro sends security alerts to your Slack workspace for events such as failed login attempts, IP lockouts, and suspicious activity.
Does All In One Login support webhooks?
Yes. All In One Login Pro lets you send security events to HTTPS endpoints and connect with automation tools such as Zapier, Make, n8n, and custom APIs.
What happens if I lose access to my two-factor authentication method?
All In One Login Pro supports one-time backup codes that you can use to regain access when your primary two-factor authentication method is unavailable.
Can I change the default WordPress login URL?
Yes. All In One Login lets you customize the default WordPress login URL to make your login page less predictable and help reduce unwanted login attempts.
Which social login providers does All In One Login support?
All In One Login Pro supports Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE, allowing users to sign in with their existing accounts.
Can I enable passwordless login on my WordPress site?
Yes. All In One Login supports passwordless login through email OTP. Pro adds SMS OTP, temporary login URLs, and one-click email login links, giving users convenient alternatives to traditional passwords.
How does All In One Login handle security vulnerability reports?
We take security seriously. If you discover a potential vulnerability in All In One Login, please report it through our Patchstack Vulnerability Disclosure Program . Patchstack helps verify reports and coordinate responsible disclosure with our development team.
Does All In One Login support WordPress Multisite?
Yes. All In One Login supports WordPress Multisite, allowing you to use supported login security and customization features across your multisite network.
What is the difference between All In One Login Free and Pro?
Free includes login URL customization, Google reCAPTCHA, login activity logs, email OTP login, and other essential login security features. Pro adds advanced access controls, additional two-factor authentication methods, social login integrations, security notifications, and passwordless login options.
Can I restrict WordPress login access by IP address?
Yes. All In One Login Free includes IP blacklist and whitelist controls for the login page. Pro adds related advanced access features such as Limit Login Attempts lockouts and additional security tooling.
Can I temporarily give someone access to my WordPress site without sharing a password?
Yes. All In One Login Pro supports temporary login URLs that let you grant access without sharing passwords. You can configure link expiration and access limits for temporary access.
Does All In One Login protect against user enumeration?
Yes. All In One Login includes user enumeration protection to help prevent visitors from discovering WordPress usernames through supported author and query string requests. Pro also includes user enumeration logs to help administrators review recorded activity.
Where can I find documentation and support for All In One Login?
Visit the All In One Login website to find plugin information, documentation, and support resources.
Website LLMs.txt and LLMs-Full.txt Generator is an LLMs.txt generator and llms-full.txt generator for WordPress. It helps site owners generate, manage, preview, validate, and serve AI discovery files from published public content. Use it to create structured /llms.txt and optional /llms-full.txt end
EngageDock AI is a customizable floating contact widget for WordPress websites that want more leads and faster visitor communication. It helps small businesses turn website traffic into calls, texts, emails, and callback requests from one clean contact panel. Key Features: Click-to-Call – One tap ca
Altify AI is an auto ALT text and AI ALT text plugin for WordPress images. It helps generate descriptive image ALT text for accessibility and image SEO. Use bulk image ALT text tools for your Media Library, generate featured image ALT text automatically, and scale WooCommerce image ALT updates with
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
