Shield Security plugin offers extremely effective protection against WordPress login attacks, and provides tried and tested methods for verifying the identity of users active on the system.


It is composed of several parts (modules). The Login Guard is one of its modules.


The Login Guard module is quite large and is comprised of several components (features).

Login Guard features explanations

Login Guard features are designed to protect the WordPress login and authentication system against brute force login attacks. They also provide a user identification system in the form of two-factor authentication.


Note: You can by-pass login protection rules by using the XML-RPC system. Read more on this here.


Brute Force Login Protection

Designed for login protection. It blocks brute force hacking attacks against your login and registration pages. 


Its options are:

  • Bot (GASP) Protection

Prevents login attempts by bots. It adds a dynamically (Javascript) generated checkbox to the login form. Learn more about GASP Protected WordPress Login here.

  • Login Cooldown Interval

Limits login attempts to every X seconds. Learn more about Login Cooldown here.

  • User Registration

This option applies Brute Force Protection to user registration and lost password. 

This option helps you to add support for 3rd-party login, register, and password reset forms such as Woocommerce, BuddyPress and Easy Digital Downloads. 


Important: 3-rd Party Support option is available with Shield Pro only.


Read more about Brute Force Login Protection here.


Google reCaptcha

This feature helps you to add Google reCaptcha to the login screen.


Its options are:

You can choose the reCAPTCHA display format that best suits your site, including the new Invisible reCAPTCHA. 


Important: "reCaptcha style" option is available with Shield Pro only.


Email Two-Factor Authentication

The options available for this are as follows:

  • Enable Email Authentication

When enabled, this option will require all users to verify their login by email-based two-factor authentication. Learn more about Two-Factor Authentication by Email here.

  • Enforce - Email Authentication: Select user roles you want to be subject to Email Authentication. 


Google Authenticator Two-factor Authentication

Allows users to use Google Authenticator. Learn more about Google Authenticator here.


Yubikey Two-factor Authentication

Verifies the identity of the users who log in to your site - i.e. they are who they say they are. Learn more about Yubikey 


Its options are:

  • Enable Yubikey Authentication

When combined with your Yubikey API Key details (below) it will form the basis of your Yubikey Authentication.

  • Yubikey App ID

When combined with your Yubikey API Key (option 3) it will form the basis of your Yubikey Authentication.

  • Yubikey API Key

When combined with your Yubikey App ID (option 2) it will form the basis of your Yubikey Authentication. 


Important: Review the info link on how to get your own Yubikey App ID and API Key.


Read more about Yubikey Authentication here.


Multi-Factor Authentication

Verifies the identity of users who login to your site - i.e. they are who they say they are.


Its options are:

  • Enable Multi-Factor Authentication

When this option is enabled, all multi-factor authentication methods will be applied to a user login.

A user can by-pass Multi-Factor Authentication (MFA) for the set number of days.


Important: Multi-Factor By-Pass option is available with Shield Pro only.


Read more about Multi-Factor Authentication here.


Hide Login Page

Hides your wp-login.php page from brute force attacks and hacking attempts - if your login page cannot be found, no-one can login. 


Read more about Hide WP Login Page and how to use this feature.


User Messages

This feature helps you to customize the messages displayed to the user. Find out what custom user messages are available here.


Its options are:

  • GASP Checkbox Text

You can change the text displayed to the user beside the checkbox.

  • GASP Alert Text

You can change the text displayed to the user in the alert message if they don't check the box.


Important: These options are available with Shield Pro only.


To find out what the extra features for Shield Pro are, read the article here.


To learn more on how Login Guard module works, and what options you should enable, read our blog article here.


Please note that Shield guided walk-through wizards are now available for Login Guard module. More information on this can be found here.