Popis
📢 A Pro version Lifetime Deal is available ⏰
Looking for a one-stop solution to protect and customize your WordPress login page (wp-admin)? If that’s what you need, then Download All in One Login Plugin NOW]
Over 60,000 website owners already use All in One Login for their WordPress login security and customization. 🎉
And the reason for that is obvious! 👇
AIO Login is a top-notch WordPress admin security plugin that empowers you to secure and customize the WordPress wp-admin login page. Which means it offers robust security features and extensive customization options. 🤯
So, if you really want to level up your WordPress login security, then AIO Login is a must-have plugin. 💯
From changing the WP-Admin URL to integrating Google reCAPTCHA, AIO Login provides everything you need to secure and customize your WordPress login page.
Isn’t that amazing? Wait until you see its features❕ 😃 🚀
Key Features Our Users 🤍 About All In One Login
The All in One Login plugin includes all the essential features that ensure the best WordPress login protection and customization.
Let’s explore some of its key features: 👇
✔️ Change WP-Admin URL
Secure your site by changing the default WP-Admin URL. Hide the WordPress login page from hackers and prevent unauthorized access with a simple custom login URL.
✔️ Google reCAPTCHA
Protect your WordPress login page from spam and bots. Add Google reCAPTCHA v2 or v3 to your WP-Admin for secure authentication and reduce automated login attempts.
✔️ Limit Login Attempts
Prevent brute-force attacks by limiting failed login attempts. Lock out users after multiple failures and safeguard your WP-Admin with this WordPress limit login attempts plugin.
✔️ Login Redirection [Free + Pro]
Control where users are redirected after login and logout by creating custom redirection rules for all users, user roles, or specific users.
✔️ Login Page Customizer
Transform your WordPress login page with live preview customization. Change logos, colors, backgrounds, and layouts without coding.
✔️ User Enumeration [Free + Pro]
Block attackers from discovering WordPress usernames through author or query string requests. This prevents exposure of valid usernames and strengthens login security against brute-force attacks.
✔️ Disable Common Usernames [Pro]
Block weak or predictable usernames to improve WordPress login security. Force unique usernames and prevent attackers from exploiting common entries on your WordPress site.
✔️ Password Strength Checker [Pro]
Enforce strong passwords for WordPress users. Set minimum length, character rules, and uppercase/lowercase requirements to ensure secure credentials and prevent unauthorized WP-Admin access.
✔️ Ban User/IP Address [Pro]
Block unwanted users or IP addresses instantly. Restrict access to your WordPress login page and protect WP-Admin from hackers using this IP and user ban plugin.
✔️ App-Based 2FA [Pro]
Add two-factor authentication to WordPress login. Enhance security for WP-Admin and ensure only authorized users can access your site.
✔️ Temporary Login URLs (Passwordless Login) [Pro]
Give passwordless login access to any specific user by generating temporary login URLs. Control the number of visits and expiration to grant a short-term login without compromising WordPress site security.
✔️ Whitelist IP Addresses [Pro]
Allow only trusted IP addresses to access your WordPress login page. Restrict WP-Admin access to selected users, adding an extra security layer to your site.
✔️ Social Login Integration [Pro]
Enable users to log in with Google, Facebook, Microsoft, or LINE. Simplify WordPress and WooCommerce registration while improving security and user experience.
✔️ hCaptcha [Pro]
Protect your WordPress login page from bots and spam with a privacy-first alternative. hCaptcha delivers robust, enterprise-grade bot protection while keeping user data secure (GDPR/CCPA compliant) and offering a faster, more human-friendly verification experience for real users
✔️ Google Fonts Integration [Pro]
Access 1,900+ Google Fonts to match your login page typography with your brand identity. Customize fonts across all login elements.
✔️ Email-Based 2FA [Pro]
Add an extra security layer with email one-time passwords (OTP). Users receive a 6-digit verification code via email during login, no authenticator app required.
✔️ 2FA Backup Codes & Grace Period [Pro]
Never get locked out! Generate one-time backup codes and set grace periods for smooth 2FA rollout across your user base.
✔️ Slack Security Notifications [Pro]
Get real-time WordPress security alerts directly in your Slack workspace. Monitor failed logins, IP lockouts, and suspicious activity instantly.
✔️ Webhook Notifications [Pro]
Integrate with Zapier, Make, n8n, or custom APIs. Send security events to any HTTPS endpoint for advanced automation and monitoring.
✔️ Login Templates [Free + Pro]
Choose from multiple professionally designed login page templates. Apply modern, minimalist, or professional designs instantly.
✔️ Google Fonts Integration [Pro]
Access 1,900+ Google Fonts to match your login page typography with your brand identity. Customize fonts across all login elements.
✔️ WooCommerce Login Integration [Pro]
Allow customers to log in with social accounts on WooCommerce checkout and account pages. Enhance login security and user experience with Google, Facebook, Apple, Discord, Microsoft, or LINE.
Don’t Miss Out on Social Login Integrations
All in One Login supports social integrations with leading platforms, making sign-in faster, easier, and more secure.
- Google Social Login [Pro]
Let users log in with one of the most widely used authentication methods worldwide. By enabling Google login, you reduce friction for users, making registration easier.
- Facebook Social Login [Pro]
With billions of users globally, Facebook login is a familiar and trusted option for social logins. Allowing users to sign in with Facebook means faster onboarding and less abandonment at registration.
- Microsoft Social Login [Pro]
Perfect for business and education-focused websites, Microsoft login provides secure authentication. It aligns with the tools professionals already use every day.
- GitHub Social Login [Pro]
Let developers and tech professionals log in instantly with their GitHub accounts. Perfect for developer communities and tech-focused websites.
- Apple Social Login [Pro]
Offer privacy-first authentication with Sign in with Apple. iOS and macOS users can protect their email privacy while enjoying seamless login experiences.
- Discord Social Login [Pro]
Enable 150+ million Discord users, gaming communities, and Discord servers to log in with one click. Ideal for community-driven websites and creator platforms.
- LINE Social Login [Pro]
LINE has around 184 monthly active users worldwide, which is a great option for websites targeting international audiences.
10 Key Reasons to Choose All In One Login for WP Login Security and Customization 😎
⚡ Reason #1: Greater Security for Your WP-Admin
AIO Login provides robust security features to protect your WP Admin page.
-
Change WP-Admin URL: Customize the WordPress default login path.
-
Ban User/IP Address: Block unauthorized access instantly.
-
Detailed Activity Logs: Monitor all login attempts
-
Limit Login Attempts: Prevent brute force attacks..
-
Whitelist IP Addresses: Restrict access to trusted IPs.
⚡ Reason #2: Complete Login Page Branding & Customization
Create a professional, branded login experience that matches your website identity.
-
Live Preview Customizer: See changes in real-time without coding.
-
9 Pre-Built Templates: Choose from modern, dark, glass, and corporate designs (2 free + 7 pro).
-
Logo & Branding: Upload custom logos, set dimensions, and configure click behavior.
-
Background Customization: Set desktop and mobile backgrounds with full control.
-
Google Fonts Library: Access 1,900+ fonts for perfect typography.
-
Form Styling: Customize colors, borders, shadows, spacing, and button designs
-
Custom CSS: Add advanced styling with built-in code editor
-
Favicon & Tab Title: Brand the browser tab for complete consistency
⚡ Reason #3: Brute Force Protection
Protect your WordPress login page (wp-admin) from brute force attacks.
-
Failed Login Limits: Set limits on login attempts.
-
User Lockout: Lock out users after failed attempts.
-
Custom Lockout Settings: Customize lockout duration.
-
Prevent Unauthorized Access: Secure your WP Admin.
-
Real-time Monitoring: Track login attempts and threats.
⚡ Reason #4: Spam Prevention and User Verification
Prevent spam and unauthorized logins with Google reCAPTCHA integration.
-
reCAPTCHA Integration: Add an extra layer of security.
-
Customizable Settings: Choose between v2 and v3.
-
Bot Prevention: Keep your login page spam-free.
-
User Verification: Ensure only legitimate users access your site.
-
User Enumeration: Prevent your usernames & ID’s from millicious attacks.
-
Enhanced Security: Protect against automated attacks.
⚡ Reason #5: Comprehensive Activity Monitoring
Monitor all login activities for enhanced WordPress login security. See the username, IP address, date, time, lockout list, and more.
-
IP Address Ban: Block specific IPs.
-
User Ban: Prevent specific users from logging in.
-
Custom Messages: Display messages for banned users.
-
Enhanced Control: Manage who can access your site.
-
Immediate Action: Take action against threats swiftly.
⚡ Reason #6: Immediate Blocking of Suspicious Users
Block suspicious users instantly to prevent unauthorized access to your WordPress login page and set a custom message on display for banned users.
-
Real-time Logs: Track login attempts in real time.
-
User Activity: Monitor user activities.
-
IP Address Tracking: Review IP addresses.
-
Failed Login Attempts: Get details on failed attempts.
-
Security Audits: Conduct thorough security audits.
⚡ Reason #7: Advanced Two-Factor Authentication (2FA)
Add multiple layers of security with flexible 2FA options tailored to your needs.
-
Email OTP Authentication: Send 6-digit verification codes via email—no app required
-
Authenticator App Support: Compatible with Google Authenticator, Microsoft Authenticator, and Authy
-
Backup Codes: Generate one-time use codes for emergency access
-
Grace Period: Give users time to configure 2FA before enforcement
-
Remember Trusted Devices: Skip 2FA on recognized devices for 7-90 days
-
Role-Based Enforcement: Apply 2FA to specific user roles or all users
-
Force Session Logout: Terminate all active sessions when 2FA settings change
⚡ Reason #8: Simplified Access with Social Login
Make logging in easier by allowing users to sign in with their existing social accounts.
-
Multiple Platforms Supported: Google, Facebook, LinkedIn, and Microsoft.
-
Faster Onboarding: Reduce friction during registration and login.
-
Improved User Experience: No need to remember another password.
-
Lower Abandonment Rates: Minimize drop-offs at sign-in.
-
Seamless Integration: Works smoothly with your WordPress site.
⚡ Reason #9: Real-Time Security Notifications & Alerts
Stay informed about security events with instant notifications to your favorite tools.
-
Slack Integration: Get security alerts directly in your Slack workspace
-
Webhook Support:Send events to Zapier, Make, n8n, or custom APIs
-
Failed Login Alerts: Monitor every unsuccessful login attempt
-
IP Lockout Notifications: Get notified when IPs are blocked
-
User Enumeration Detection: Track username discovery attempts
-
Custom Event Triggers: Choose which events send notifications
-
JSON Format: Structured data for easy integration and automation
⚡ Reason #10: Create Personalized Login Experiences
Control where users are redirected after login or logout to deliver a more streamlined and personalized user experience.
-
Login Redirects: Send users to custom pages immediately after login.
-
Logout Redirects:Redirect users to specific destinations after logout.
-
Role-Based Rules: Create unique destinations for different user roles.
-
User-Specific Redirects: Configure redirects for individual users.
-
Fallback Protection: Ensure users always reach a valid destination, even if a target URL becomes unavailable.
Try Our Other Awesome WordPress Plugins
-
Gutena Forms: Create modern, responsive contact forms directly in the Gutenberg block editor. Add advanced fields, protect against spam with reCAPTCHA and Cloudflare Turnstile, manage form entries, and more.
-
Password Protected: Secure your WordPress site, posts, pages, and categories with simple password protection.
-
WP EasyPay: Accept Square payments and donations easily on your WordPress site.
-
WC Shop Sync: Add Square payments and sync WooCommerce products, customers, and orders with your Square POS.
-
Advanced File Manager: Easily manage and organize your WordPress files directly from the dashboard.
-
Post SMTP: Easily configure and manage WordPress email delivery with reliable SMTP and detailed email logs directly from your dashboard.
-
CF7 Apps: Add honeypot, hCaptcha, and database entries to Contact Form 7. New extensions are continuously added.
-
myCred: Add gamification, rewards, ranks, badges, and points management systems to your WordPress website.
-
New User Approve: Control user registrations by manually approving or denying new signups.
-
Bookify: Your go-to online bookings and appointment scheduling plugin for WordPress.
-
WPExperts WooCommerce Store: Explore premium WooCommerce plugins and professional solutions by WPExperts.== Requirements ==
Technical Documentation
Click here to access our detailed, step-by-step technical documentation for complete security of your WordPress login page (wp-admin).
Need Help? Get Expert Assistance
Having trouble securing or customizing your WordPress login page (WP-Admin URL)? Don’t worry, our expert support team is here to help! 🤝
Our dedicated support team is here to guide you through any issues, answer your questions, and assist you in using the plugin to its full potential.
👉 Reach out by opening a support ticket, for fast and reliable help. We’re here for you!
Obrázky
Inštalácia
To install and activate this plugin…
- Go to Plugins, and click on „Add New“.
- Search for AIO Login.
- Download, install, and activate it.
- Get the AIO Login setting page in WordPress side menu.
Časté otázky
-
Can I use the All in One Login plugin for free?
-
Yes, you can install the free version of AIO Login, which offers unique features such as the change of the WP-Admin URL, block login attempts, Google reCAPTCHA, detailed activity logs, and even custom login design for customizing and securing your WordPress login page.
-
Does All In One Login support Cloudflare Turnstile?
-
The plugin includes Cloudflare Turnstile integration, a privacy-friendly captcha alternative that protects against bots without frustrating puzzles or tracking cookies.
-
What 2FA methods does All In One Login support?
-
We offer multiple 2FA options: Email-based OTP (one-time passwords), Authenticator App support (Google Authenticator, Microsoft Authenticator, Authy), backup codes for emergency access, and trusted device recognition.
-
Can I redirect different users to different pages after login?
-
Yes. AIO Login allows you to create custom redirection rules based on All Users, User Roles, or Specific Users. This enables you to send customers, subscribers, members, administrators, or individual users to different pages after login or logout. You can also configure rule priorities to control which redirection rule is applied when multiple conditions match.
-
Can I customize my WordPress login page design?
-
Absolutely! All In One Login includes a visual customizer with live preview. You can choose from 9 pre-built templates, upload logos, change colors, customize backgrounds, select from 1,900+ Google Fonts, and add custom CSS, all without coding.
-
Can I receive security alerts in Slack?
-
Yes. All In One Login Pro integrates with Slack notifications to send real-time alerts for security events such as failed login attempts, IP lockouts, and user enumeration detection directly to your Slack workspace.
-
What are backup codes in 2FA?
-
Backup codes are one-time recovery codes used to access your account if you lose access to your primary 2FA method (email OTP or authenticator app). Admins can generate 1–20 backup codes per user for emergency login access.
-
Does All In One Login support webhooks?
-
Yes. All In One Login supports webhook integrations that allow you to send security events to any HTTPS endpoint. This makes it easy to connect with tools like Zapier, Make, n8n, or custom monitoring and automation systems.
-
Is AIO Login compatible with all WordPress themes?
-
Yes, you can easily customize the WordPress admin URL with AIO Login, enhancing security by making it harder for attackers to find your login page.
-
Can I customize the WordPress admin URL?
-
Yes, you can easily customize the WordPress admin URL with AIO Login, enhancing security by making it harder for attackers to find your login page.
-
How does App-Based 2FA protect WP-Admin?
-
App-Based 2FA adds an extra layer of security by requiring a second form of authentication via mobile apps like Google Authenticator. This makes unauthorized access significantly more difficult.
-
Is AIO Login compatible with other security plugins?
-
AIO Login is generally compatible with all other security plugins, such as Jetpack, Wordfence Security, Security Ninja, etc.
-
AIO Login supports Gmail, Microsoft, LINE, Discord, Apple, and GitHub social login. These social logins simplify registration, improve user experience, and reduce abandoned accounts.
-
Can I track login activity with AIO Login?
-
Yes, AIO Login allows you to track all login attempts and activity logs in real-time. You can monitor user activity, review IP addresses, and see details on failed login attempts.
-
Is AIO Login required for WP-Admin security?
-
Even though it is not mandatory, using AIO Login can significantly enhance the security of your WP-Admin login page against unauthorized access.
-
What is user enumeration, and how does AIO Login prevent it?
-
User enumeration is when attackers try to discover valid WordPress usernames. AIO Login blocks these attempts, keeping your WP-Admin secure and preventing brute-force attacks.
-
How can I enhance WordPress login security with AIO Login?
-
You can enforce strong passwords, enable app-based 2FA, limit login attempts, whitelist IPs, and block user enumeration to fully protect your WordPress login page.
-
Where do I report security bugs found in this plugin?
-
Please report security bugs found in the source code of the Change wp-admin login plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
Recenzie
Prispievatelia a vývojári
“All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more.” je softvér s otvoreným zdrojovým kódom. Do tohto pluginu prispeli nasledujúci ľudia.
Prispievatelia
„All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more.“ bol preložený do 12 jazykov. Ďakujeme prekladateľom za ich príspevky.
Máte záujem o vývoj?
Prehľadávajte zdrojový kód, preskúmajte SVN repozitár, alebo sa prihláste na odber vývojárskeho logu cez RSS.
Zoznam zmien
2.4.0 – June 24, 2026
- NEW – Introduced Email OTP Login.
2.3.1 – June 12, 2026
- TWEAK – Added an admin notice
2.3.0 – June 08, 2026
- NEW – Introduced Login Redirection, allowing users to create personalized login and logout redirection rules.
- FIX – Resolved a CSS issue affecting the WordPress login page.
- FIX – Resolved a PHP warning related to the Template Grid customization control when rendering login customization templates.
2.2.0 – May 01, 2026
- New – Introduced Real-Time Customizer for login form customization.
- Tweak – Added the Pro screen of Discord and GitHub in Social Login.
- Tweak – Added tooltip content for all plugin features.
- Tweak – Added 2FA tab in plugin navigation.
- Tweak – Added backward compatibility for the old Customizer.
- Tweak – Added Notifications sub-tab in Activity Logs.
2.1.1 – Jan 21, 2026
- Tweak – Added new tab of Integration and WooCommerce integration pro screen.
- Tweak – Added the hCaptcha Pro screen in the Captcha tab.
2.1.0 – Oct 15, 2025
- New – Added User Enumeration Feature
- Tweak – Added pro screen of User Enumeration logs in Activity logs
2.0.10 – Oct 06, 2025
- Tweak – Separated Social Login in navigation and added Pro banner.
- Improvement – Revamped Google reCAPTCHA and restructured it into a multi-step format.
2.0.9 – Aug 26, 2025
- Security – Enhanced login protection to better defend against repeated failed login attempts and brute-force attacks.
2.0.8 May 21, 2025
- Updated feedback SDK to latest version.
2.0.7 Apr 21, 2025
- Fixed translation notice.
- Tested compatibility with latest WordPress (Version 6.8)
2.0.6 Mar 13, 2025
- Updated readme with a new feature.
2.0.3 Dec 02, 2024
- Updated backend with VueJS to improve UX
2.0.2 Nov 21, 2024
- Tested compatibility with latest WordPress (Version 6.7)
- Updated – Feedback SDK to latest Version
2.0.1
- New – Added multisite compatibility
- New – Added button to clear all failed & lockout logs
- Fix – Resolved php error for older versions
2.0.0
- Fixed – Forgot password link breaking.
- New – Improved the UI.
- New – Added new Dashboard
- New – Added Limit login Attempts feature
- New – Added activity logs for failed login attempts
- New – Added activity logs for lockout users
- New – Added Google reCAPTCHA functionality
- New – Added login page customization options
1.1.8
- Fixed: compatibility issues with WPForms, WordFence
1.1.7
- Fixed: Redirection to wp-admin when trying to access admin pages directly.
1.1.6
- Fixed: The recent commit has been reverted to address conflicts in various cases
1.1.5
- Fixed: Resolved the issue undefined is_user_logged_in() function error in certain cases.
1.1.4
- Fixed: Redirection to wp-admin when trying to access admin pages directly.
1.1.3
- Handover plugin
1.1.2
- More Fixes for php8 warnings
1.1.1
- Fix php8 warnings
1.1.0
- Update WordPress API settings
1.0.9
- fix security issue
1.0.8
- fix security issue
1.0.7
- fix missing register_setting on the add_settings_field
1.0.6
- fix suppressed warning
1.0.5
- add site URL before the new redirect input field
1.0.4
- Add redirect custom field.
- Better instructions in how to use the redirect field
1.0.3
- Add redirect custom field.
- When someone tries to access the wp-login.php page or the wp-admin directory while not logged in will be redirected to the page you defined on the redirect custom field.
1.0.2
- Add translations
1.0.1
- Add automatic redirect for when someone tries to access the wp-login.php page or the wp-admin directory while not logged in will be redirected to the website homepage.
1.0.0
- Initial version.