iThemes Security Pro Plugin Core Features

WordPress Brute Force Protection

iThemes Solid Security Pro – Limit the number of failed login attempts allowed per user with WordPress brute force protection. If someone is trying to guess your password, they’ll get locked out after a few attempts.

File Change Detection

If someone manages to get into your site, they’ll probably add, remove or change a file. Get email alerts showing any recent file changes so you know if you’ve been hacked.

404 Detection

If a bot is scanning your site for vulnerabilities, it will generate a lot of 404 errors. iThemes Security will lock out that IP after the limit you set (20 errors in 5 minutes by default).

Strong Password Enforcement

Set which level of users on your site (admins, editors, users, etc.) need to have strong passwords. Strong password enforcement is one of the best ways to lock down WordPress.

Lock Out Bad Users

Keep bad users away from your site if they have too many failed login attempts, if they generate too many 404 errors, or if they’re on a bot blacklist.

Away Mode

Not making changes to your site 24 hours a day? Harden WordPress by making the WordPress dashboard inaccessible during specific hours so no one else can sneak in and attempt to make changes.

Hide Login & Admin

Change the default URL of your WordPress login area so attackers won’t know where to look. This feature is also great to help clients remember their login link.

Database Backups

Schedule database backups and have them emailed to you. Or you can get our WordPress backup plugin to step up your backup game. Make complete backups and send them to off-site storage destinations.

Email Notifications

Get email notifications when someone gets locked out after too many failed login attempts or when a file on your site has been changed.

iThemes Security Pro Plugin allows WordPress Two-Factor Authentication

With iThemes Security Pro’s WordPress two-factor authentication, users are required to enter both a password AND a secondary code sent to a mobile device such as a smartphone or tablet. Both the password and the code are required to successfully log in to a user account. Two-factor authentication adds an extra layer of WordPress security to verify it’s actually you logging in and not someone who gained access (or even guessed) your password.

MOBILE APP

The iThemes Security Pro plugin works with common two-factor authentication mobile apps such as Google Authenticator, Authy, FreeOTP and Toopher.

EMAIL

Time-sensitive codes are supplied via email to the email address associated with the user’s account.

BACKUP CODES

Provides a set of one-time use codes that can be used to login in the event the primary two-factor method is lost.