WordPress Login Page Plugin

All In One Login helps you protect and customize your WordPress login experience. Change the login URL, add Email 2FA or Email OTP, block or allow IPs, review activity logs, and style the login page with templates.

Documentation | Pro features

Looking for a one-stop solution to secure and customize your WordPress login page (wp-login.php)? If that’s what you need, you’re in the right place.

Over 60,000 website owners use All In One Login to secure and customize their WordPress login pages. 🎉

The reason is obvious! 👇
All In One Login is a complete WordPress login security plugin that helps you secure and customize your WordPress login page with security features and customization options. 🤯

From changing the WordPress login URL to integrating Google reCAPTCHA, All In One Login offers features to help protect and customize your WP login page.
Isn’t that amazing? Wait until you see its amazing features! 😃 👇

Key Features Our Users Love About All In One Login (Free + Pro)

The All in One Login plugin includes all the essential features that ensure the best WordPress login protection and customization.

Free Version Includes the Following Features: 👇

Wp-login.php URL Customization
Secure your site by changing the default wp-login.php URL. Hide the WordPress login page from hackers and prevent unauthorized access with a simple custom login URL
Google reCAPTCHA
Protect your WordPress login page from spam and bots. Add Google reCAPTCHA v2 or v3 to your WP-Admin for secure authentication and reduce automated login attempts.
Login and Logout Redirection
Control where users are redirected after login and logout by creating custom redirection rules for all users, user roles, or specific users.
Login Page Customizer
Transform your WordPress login page with live preview customization. Change logos, colors, backgrounds, and layouts without coding.
User Enumeration Protection
Block attackers from discovering WordPress usernames through author or query string requests. This prevents exposure of valid usernames and strengthens login security against brute-force attacks.
Login Security Dashboard
Manage your login security settings from a centralized dashboard. View recent successful and failed login attempts, monitor locked-out IP addresses, and access features such as custom login URLs, limit login attempts, two-factor authentication (2FA), and IP blocking.
Email OTP Login
Allow users to sign in securely using a one-time verification code sent to their email address. This provides a passwordless login experience while reducing the risks associated with weak or compromised passwords.
Login Activity Logs
Keep track of all login attempts and activity logs for enhanced security monitoring. See the username, IP address, date, time, lockout list, and more.
Disable Common Usernames
Block weak or predictable usernames to improve WordPress login security. Force unique usernames and prevent attackers from exploiting common entries on your WordPress site.
Ban User/IP Address
Block unwanted users or IP addresses instantly. Restrict access to your WordPress login page and protect WP-Admin from hackers using this IP and user ban plugin.
Whitelist IP Addresses
Allow only trusted IP addresses to access your WordPress login page. Restrict WP-Admin access to selected users, adding an extra security layer to your site.
Email-Based 2FA
Add an extra security layer with email one-time passwords (OTP). Users receive a 6-digit verification code via email during login, no authenticator app required.

✨Pro Version Unlocks (everything in Free, plus):

2FA Backup Codes & Grace Period
Never get locked out! Generate one-time backup codes and set grace periods for a smooth 2FA rollout across your user base.
Slack Security Notifications
Receive real-time WordPress security alerts directly in Slack. Monitor failed logins, IP lockouts, and suspicious activity.
Webhook Notifications
Connect with Zapier, Make, n8n, or custom APIs. Send security events to HTTPS endpoints for automated monitoring and workflows.
Login Templates
Choose from professionally designed login page templates. Apply modern, minimalist, or professional designs instantly.
Google Fonts Integration
Access over 1,900 Google Fonts to match your login page typography with your brand. Customize fonts across all login elements.
WooCommerce Login Integration
Enable social login and passwordless Login Links on WooCommerce account and checkout pages. Support Google, Facebook, Apple, Discord, Microsoft, and LINE.
Social Login Integration
Allow users to sign in with Google, Facebook, Microsoft, or LINE. Simplify WordPress and WooCommerce registration while improving the login experience.
hCaptcha
Protect your WordPress login page from bots and spam with privacy-focused, enterprise-grade verification that helps keep user data secure.
App-Based 2FA
Add two-factor authentication to WordPress login. Protect WP-Admin by ensuring that users verify their identity before accessing your site.
Temporary Login URLs (Passwordless Login)
Generate temporary login URLs for specific users. Control link expiration and the number of visits to provide secure, short-term access without sharing passwords.
Password Strength Checker
Enforce strong WordPress passwords by setting minimum length, character requirements, and uppercase and lowercase rules to improve login security.
Limit Login Attempts
Prevent brute-force attacks by limiting failed login attempts. Lock out users after repeated failures to protect your WordPress login page.
SMS OTP Login
Allow users to authenticate using one-time verification codes sent by SMS through Twilio integration for a secure, passwordless login experience.
Login Link (Magic Link)
Let users sign in using a secure, one-click link sent to their email. Simplify authentication and reduce login and checkout friction.
User Enumeration Logs
Track attempts to discover WordPress usernames. Review recorded activity to identify suspicious behavior and investigate potential security threats.
5+ Social Login Options
Allow users to sign in using existing social accounts, including Google, Facebook, Microsoft, LINE, GitHub, Apple, and Discord.
Google Social Login
Let users sign in with their Google accounts for faster registration and a simpler login experience.
Facebook Social Login
Enable familiar Facebook authentication to simplify user onboarding and reduce registration friction.
Microsoft Social Login
Provide secure Microsoft authentication for business and education-focused websites, making login easier for users who already use Microsoft services.
GitHub Social Login
Allow developers and technology professionals to sign in with their GitHub accounts, making it ideal for developer communities and technical websites.
Apple Social Login
Offer Sign in with Apple for convenient, privacy-focused authentication, allowing users to protect their email addresses.
Discord Social Login
Allow Discord users to sign in with one click. Ideal for gaming communities, creator platforms, and community-driven websites.
LINE Social Login
Enable LINE authentication for websites targeting audiences in regions where LINE is widely used.

WordPress Multisite Network Compatibility

WordPress Multisite Support
Manage login security and customization across your WordPress Multisite network. Use supported login protection and customization features to help secure access to your network’s websites.

Why Choose All In One Login for WordPress Login Security and Customization? 👇

WordPress Login Security
Change your login URL, block unwanted users and IP addresses, and restrict login access to trusted IP addresses.
Brute-Force Protection
Limit failed login attempts and help prevent automated login attacks.
Login Page Customization
Customize your WordPress login page with templates, logos, backgrounds, colors, and fonts.
Bot Protection
Integrate Google reCAPTCHA or hCaptcha to help protect your login page against bots and automated attacks.
Login Activity Monitoring
Monitor login attempts, IP addresses, lockouts, and user enumeration events to identify suspicious activity.
Two-Factor Authentication (2FA)
Add email-based or authenticator app verification, with backup codes and additional access controls.
Passwordless Login
Let users sign in using email OTPs, SMS OTPs, temporary login URLs, or one-click login links.
Social Login
Allow users to sign in using supported providers, including Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE.
Login and Logout Redirection
Redirect users to specific pages after login or logout based on their roles or individual accounts.
Security Notifications
Receive security alerts through Slack or external services using webhooks.
WooCommerce Login Integration
Enable supported social login and passwordless authentication options on WooCommerce account and checkout pages.
WordPress Multisite Compatibility
Apply supported login security and customization features across your WordPress Multisite network.
Password Policy Controls
Configure password strength requirements to help users create stronger and more secure passwords.

External Services

Third-Party Services We Use

All In One Login connects to third-party services to provide optional features. These services may process certain information when you enable and use the related features. Services marked “Pro plugin only” are used only when the separate AIO Login Pro plugin is installed and the related feature is enabled.

Google reCAPTCHA

Helps protect your WordPress login page from bots and automated login attempts. When enabled, Google may process your IP address, browser information, and verification data.

Service: Google reCAPTCHA

hCaptcha (Pro plugin only)

Helps detect bots and automated activity on your WordPress login page when enabled in AIO Login Pro. When enabled, the Pro plugin communicates with hCaptcha to verify user interactions.

Service: hCaptcha

Cloudflare Turnstile

Optional CAPTCHA alternative used when an administrator enables Cloudflare Turnstile (for example with passwordless or magic-link login features). When enabled, the visitor’s browser loads scripts from challenges.cloudflare.com and Cloudflare may process technical data such as IP address and browser information to verify the interaction.

Service: Cloudflare Turnstile

Google Fonts

Provides additional fonts for login page customization. When fonts load from Google’s servers, the visitor’s browser may share technical information, such as their IP address.

Service: Google Fonts

Twilio (Pro plugin only)

Delivers SMS verification codes when an administrator enables and configures SMS OTP login in AIO Login Pro. Information shared with Twilio may include the recipient’s phone number and the message content required to deliver the code.

Service: Twilio

Social Login Providers (Pro plugin only)

With AIO Login Pro, social authentication is available through Google, Facebook, Microsoft, GitHub, Apple, Discord, and LINE. When a user selects a provider, the Pro plugin communicates with that service to authenticate the user and process the information required for login.

Google — Privacy · Terms
Facebook — Privacy · Terms
Microsoft — Privacy · Terms
GitHub — Privacy · Terms
Apple — Privacy · Terms
Discord — Privacy · Terms
LINE — Privacy · Terms
ipapi.co (Pro plugin only)

Used by AIO Login Pro for optional IP geolocation (for example activity or security displays). When used, the visitor or admin IP may be sent to ipapi.co to resolve approximate location data.

Service: ipapi.co

Freemius

Supports optional admin email opt-in and licensing-related services for this plugin. When an administrator consents to the Freemius opt-in prompt, Freemius may receive the admin email address, site URL, and basic environment/plugin metadata needed for the opt-in and account services. No opt-in data is sent without that consent. Freemius premium remote install is disabled for the WordPress.org build.

Service: Freemius

Privacy Policy

All In One Login may process information when you use its features or connect to third-party services. For more information about how we collect, use, and handle data, please read our All In One Login Privacy Policy.

Other Plugins by Us

Password Protected: Protect your WordPress site, posts, pages, and categories with password protection.
Post SMTP: Configure and manage WordPress email delivery with SMTP and detailed email logs.
New User Approve: Manage user registrations by approving or denying new signups.

Technical Documentation

Visit our All In One Login Documentation for step-by-step instructions on securing and customizing your WordPress login page.

Need Help? Get Expert Assistance

Need help securing or customizing your WordPress login page? Our support team is ready to answer your questions and help you get the most out of All In One Login.

Open a Support Ticket to get assistance with any issues.

All In One Login

About this plugin