How to make login possible only from my IP
-
I am the only one who updates my sites, and for the foreseeable future it will be that way and I don’t want any user registration, or any comments either. So it is just me.
How can I limit the login screen only visible to my IP address or the IPs I will designate? So in other words, no other IP in the world will not even be able to try to login, let alone making failed login attempts….
And in case I am at a different location and I move to another location before knowing my new IP, I will be locked out so in that case I must go to which file or in database where, to add my new IP address?
What I am describing here adds another layer of security so it is advisable right? Am i missing anything? As I said, I want nobody to register to my sites anyway. I don’t want to deal with guarding people’s emails etc… So the register link is already disabled but still the login screen is accessible in the whole world. I don’t need that. It is enough if only I login.
-
Do you mind if I suggest you install a plugin for adding two factor authentication instead and some brute force protection?
Locking down to an IP won’t prevent people from hitting your web server to log in but will prevent you from using a browser to admin your site remotely or if your IP address changes. With 2FA enabled then you can login and include a code or token from your authenticator.
For 2FA I use this one.
https://www.ads-software.com/plugins/two-factor/
There are others.
https://www.ads-software.com/plugins/search/two+factor/
For brute force protection I use Jetpack. The idea is when you do get a brute force attack, very early in the WordPress stack does the plugin check. If the IP is listed as part of a known attack or bot net then the connection is denied.
https://www.ads-software.com/plugins/jetpack/
Jetpack is a cloud based service and does require a WordPress.COM account.
You can read more about two-factor authentication and brute force login protection at these aricles.
https://www.ads-software.com/support/article/two-step-authentication/
https://www.ads-software.com/support/article/brute-force-attacks/
- The topic ‘How to make login possible only from my IP’ is closed to new replies.