Wordfence block existing user login

  • Hello, Premium user here but this seems appropriate for the ‘free’ side. I have a bunch of users who are set up as authors, but never need to log in. Ever. Blocking them all from logging in seems like a basic security measure. (Yes, complex passwords are used, and the users do not have their passwords.)

    Testing verifies that in Wordfence Options, you can’t block an existing user under:
    “Immediately block the IP of users who try to sign in as these usernames.”

    Is there any way in Wordfence to block login for an existing user? If not, anyone know of a way to do this without installing yet another plugin?

    Thanks for any help. MTN

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support wfphil

    (@wfphil)

    There have been discussions I see that this feature should be a part of WordPress core as a number of people don’t want to install a plugin to achieve this functionality.

    I can certainly pass on your request to the Wordfence development team. However, it all depends on if it is considered to be a useful feature to a significant number of Wordfence users.

    Thread Starter mountainguy2

    (@mountainguy2)

    Any publisher who aspires to run a multi-author blog, with financial success, could eventually experience the situation where they have a bunch of “authors” or “contributors” but none need login privileges. Not being able to disable login for these groups is a security hole. Plugins exist to do the deed, but having this as a simple feature within Wordfence would be good for those who aspire, or have achieved, a successful multi-author publication. Adding plugins every time a small feature is needed is weak. If I’m missing something here, such as an easy tweak within functions.php, apologies. MTN

    • This reply was modified 7 years, 8 months ago by mountainguy2.
    Thread Starter mountainguy2

    (@mountainguy2)

    P.S., Indeed, WordPress should have a checkbox for each user, to allow or disable login privileges. Typical of WordPress that they didn’t have this from the beginning. MTN

    • This reply was modified 7 years, 8 months ago by mountainguy2.
    Thread Starter mountainguy2

    (@mountainguy2)

    Found this, perhaps a good stopgap that doesn’t require a plugin.

    https://premium.wpmudev.org/blog/limit-access-to-your-wordpress-dashboard/

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Wordfence block existing user login’ is closed to new replies.