Lockly Documentation

Overview

Block password guessing: after a few failed logins the address is locked out for a while, longer each time, with a clear log.

• Brute force blocked
• Longer lockouts
• Lockout log

Best for: Every WordPress site

Installation

1. Download lockly-limit-login-attempts.zip from My account › My plugins or from your order email. Do not unzip it.
2. In WordPress, go to Plugins › Add New Plugin › Upload Plugin, choose the zip and click Install Now, then Activate.

Requires WordPress 6.0+, PHP 7.4+. Works with any theme, block themes and page builders.

Features

• Lockout after a number of failed logins
• Each new lockout lasts twice as long, up to your limit
• Attempts left shown on the error message
• Generic error: does not reveal if the username exists
• Log of lockouts with IP, username and duration
• Never lock your own IP addresses
• wp-login, WooCommerce My account and XML-RPC

Shortcodes

Paste a shortcode in any page, post, widget or page builder text block.

• [lockly_preview]

Options of each shortcode are described in the Features above and in the plugin settings page.

For developers

Customize the plugin from your theme’s functions.php or a small plugin, without editing its files (your changes survive updates).

Filters

• lockly_active
• lockly_sanitize

add_filter( 'lockly_active', function ( $value ) {
	// Change $value here.
	return $value;
}, 10, 1 );

Actions

• lockly_admin_after_form
• lockly_admin_before_form
• lockly_admin_form_end
• lockly_lockout

Updates

Updates are free. When a new version is out, it appears in Dashboard › Updates of your WordPress site and you can install it in one click, or turn on automatic updates in Plugins. This works for the zip downloaded from your Woo-Plugins account; older copies can be replaced by downloading the latest version from My plugins. See the changelog.

Frequently asked questions