Gutenberg Login Page Customizer – Custom Login, Login URL and Limit Attempts

Gutenberg Login Page Customizer is a custom login page builder for WordPress. Design your login, registration and lost password screens in the Gutenberg block editor, start from a ready-made login template, and publish. No code, no page builder, no Customizer panel. It also protects the login with a custom login URL, a hidden wp-login.php and limit login attempts.

WordPress still runs every sign-in. The plugin places the real WordPress login form inside your design, so redirects, validation, two-factor, social login and other login plugins keep working.

Custom login page designer for the block editor

• Design the login screen like any page. Create a “Login Design” with blocks, then choose which one is live.
• Ready-made login page templates. Split screen, photo background, glass card, gradient border, stepped sign-in, tabbed log in and sign up, and more. Import one and edit it.
• Login Form block. Places the native WordPress login form. Control width, padding, radius, background, text and button colours from the sidebar.
• Login Form (stepped) and Login Form (advanced) blocks for multi-step sign-in and custom field layouts.
• Register, Lost Password, Tabs and Text blocks to build a full account area, such as a Log in and Create account switcher.
• One design for every screen. Applies to login, registration, password reset and related wp-login.php screens.
• Match your theme. Optionally load your active theme’s stylesheet so fonts and colours fit your site.
• Replace the default WordPress login look with your own layout, images, headings and branding.

Custom login URL and login security

• Custom login URL. Move the login page to your own address, for example /my-login, and hide wp-login.php. Password reset and registration links and emails follow.
• Limit login attempts. Lock out an IP address after too many failed sign-ins to slow down brute force password guessing. Choose the number of attempts and the lockout time.
• Works behind Cloudflare and proxies. Read the visitor’s real IP from the header your proxy sends.
• Allow list. Never lock out the IP addresses you trust.
• Lockout log. See which IP addresses are locked and the last username each tried, and unlock them in one click.

Safe by design

• Uses the native WordPress login form, not a replacement, so authentication stays in WordPress core.
• If the selected design is deleted, the standard WordPress login screen is shown.
• If a design has no login form block, the native form appears at the bottom of the page so nobody is locked out.
• Draft and private designs can be selected, so you can work before you go live.
• An emergency switch in wp-config.php turns the custom URL and lockouts off if you get locked out.

Who is it for?

Site owners, agencies and developers who want a branded WordPress login page built with Gutenberg, without a separate page builder, and who want to change the default login URL and limit login attempts in the same plugin.