Disable login via email address?

  • Resolved threeoten

    (@threeoten)


    4 years, 9 months ago

    Does WF have a feature that disables the ability to login to WP admin via email address? Since it’s easy for hackers to obtain email addresses from the live site, if those addresses can be used to login to that site, all they need is to crack the password. Is there a feature to only allow login via username instead?

Viewing 1 replies (of 1 total)

  • Hey @threeoten,

    This isn’t a feature that’s currently supported.

    Though, I’d like to share my personal thoughts on this. I consider a username weak by nature. Think about how many accounts you might O-Auth with using your email, which isn’t exactly secret. It’s more about the password, the longer and more complicated the better. I personally only know one password, it’s the password for LastPass, a password manager program. Then all of my passwords are extremely long and complex which prevents brute force attacks from being successful.

    Please let us know if you have any other questions or thoughts.

    Thanks,

    Gerroald

Viewing 1 replies (of 1 total)
  • The topic ‘Disable login via email address?’ is closed to new replies.