Melapress Login Security Premium

How policy scope affects WordPress logins

Melapress Login Security Premium lets administrators apply login security policies across a WordPress site or to selected visitor roles. When someone has multiple roles, administrators can set policy priority to determine which rules apply. The Premium edition includes the free edition’s capabilities and includes controls for accounts, sessions, devices, and sensitive actions.

Password rules and account status

Password policies can set minimum length, character requirements, expiration, password history restrictions, and a reset at first login. Administrators can also disable password reset links. For failed login attempts, configure the lockout duration and the method for unlocking an affected account.

Administrators can lock an account manually or configure automatic disabling for inactive WordPress visitors. A dashboard gathers inactive accounts for review. When an account is unlocked, administrators can require a password reset.

Responses to unfamiliar devices

When a login is detected from an unrecognized device, the extension can send an email alert. Administrators can also remotely terminate the session associated with that device. Session timeouts can be extended or shortened to fit the site’s requirements.

Additional access controls

• Require security questions for sensitive actions, including password resets and account unlocks.
• Limit access to the login page by IP address.
• Change the WordPress login URL and set the old URL to return a 404 response or redirect to a selected page.
• Add a GDPR consent notice to the login page.
• Create temporary login links that expire or have a usage limit, without creating additional user accounts.
• Reset all users’ passwords with one click when suspicious behavior calls for an immediate response.

Policies for various user groups

Site-wide policies apply across the site; role-based policies let administrators set different requirements for groups such as administrators, editors, and members. These policies can be managed alongside inactive-account reviews, lockout settings, and device responses. The extension also works with one-click integration with third-party plugins such as WooCommerce, LearnDash, and MemberPress.

Installation and setup

Install and activate Melapress Login Security Premium on the WordPress site, then open its settings to configure policies. Choose whether each policy applies site-wide or to selected roles, and review the account, device, session, IP, and consent settings. Before applying restrictions broadly, check the lockout and recovery methods administrators will use to manage affected accounts.