- Performance
- v2.1.0
OE Swift Cache
All-in-one speed plugin: static page cache, smart preload, WebP images, CSS/JS optimization and database clean-up.
View plugin
Online Everything Secure Login · WordPress Plugin: Lock the Front Door of Your WordPress Site.
Bots try passwords on /wp-login.php all day, on every WordPress site. Online Everything Secure Login moves the login page to an address only you know, locks out anyone who keeps guessing and asks admins for an emailed code after the password.
Usernames, versions and old APIs that attackers rely on are hidden, and every login, failure and lockout is logged — all from one modern dashboard with no page reloads.
Features
What Online Everything Secure Login Does.
-
01
Custom login address
The login form moves to your own address, such as /team-door/. /wp-login.php and /wp-admin show a "page not found" page to visitors, and every link and email WordPress sends uses the new address.
-
02
Limit login attempts
An IP that keeps entering wrong passwords is locked out for a while, and longer each time it comes back. It covers the login form, XML-RPC and application passwords.
-
03
2-step login by email
After the right password, admins get a 6-digit code by email. "Trust this device" skips it on your own browser for up to 90 days. A stolen password alone is no longer enough.
-
04
Bot trap & one error message
A hidden field catches automated login bots, and a wrong username or password shows the same message — so bots cannot find out which usernames exist.
-
05
Hidden usernames
Blocks the usual ways bots learn your login name: /?author=1, author pages, the public REST users list, the users sitemap and oEmbed data.
-
06
WordPress hardening
Switch off XML-RPC, hide the WordPress and PHP versions, send security headers and disable the theme and plugin file editor — each with one switch.
-
07
Login activity log
Every login, failed attempt, lockout and 2-step code with the username, IP and browser. Unlock an IP or add your own to the allow list in one click.
-
08
New-IP admin alerts
Get an email when an administrator logs in from an IP address that has not been seen before, so a stolen login never goes unnoticed.
Inside the Plugin
Everything That Is Included.
Requirements
- WordPress 5.8 or newer
- PHP 7.4 or newer
- Working email on the site for 2-step codes (an SMTP plugin is recommended)
- Pretty permalinks for the custom login address
Version 1.0.0 · Tested up to WordPress 7.1 · by Online Everything Technologies
Included
- Custom login URL with 404 or home-page redirect
- Login link, logout and password-reset emails updated
- Limit login attempts with growing lockouts
- Allow list for IPs and IP ranges
- Cloudflare and proxy IP support
- 2-step login with emailed codes
- Trust this device for up to 90 days
- Honeypot bot trap
- Username enumeration blocking
- XML-RPC off, versions hidden, security headers
- Login activity log with filters
- Emergency switch in wp-config.php
A Closer Look
Built Around a Modern Dashboard.
Every action runs in the background — no page reloads, no confusing settings screens.
FAQ
Online Everything Secure Login: Common Questions
What if I forget the new login address?
It is emailed to the site admin every time it is saved. You can also add define( 'OESL_OFF', true ); to wp-config.php or rename the plugin folder — /wp-login.php works again straight away.
Can I lock myself out with the attempt limit?
Only after several wrong passwords in a row, and only for a short time. Add your own IP to the allow list with one click so it is never locked, or unlock any IP from the dashboard.
Does 2-step login need an app?
No. The code arrives by email, so nothing has to be installed. Send yourself a test email from the plugin first to be sure the site can deliver email.
Will it work with my cache plugin and CDN?
Yes. The login page is never cached, and if the site is behind Cloudflare or another proxy you can choose which header holds the real visitor IP.
More Plugins
Also by OnlineEverything.
- SEO
- v2.3.0
OE Google Indexing
Instant indexing for Google, Bing and Yandex, live index status of every page and WhatsApp alerts when pages get indexed.
View plugin
- v1.0.0
OE Mail SMTP
Send every WordPress email through a real mailbox and see a log of each one: who it went to, which plugin sent it, and why one failed.
View plugin
- SEO
- v1.0.0
OE SEO
Complete SEO plus AEO / GEO: Google preview and content analysis, schema, sitemaps, redirects, and answers, FAQs and llms.txt for AI search — and it takes over from Yoast SEO without losing a single title.
View plugin
Have an Idea?
Let's Turn It Into Something Real.
Whether you're starting a new business, improving an existing website or building a completely new digital product, let's create something fast, modern and built around your goals.