Thank you for your feedback.
You led me to an interesting thought.
Add an option to completely hide / lock the login form if the key is not set.
Thank you.
As for the plug-in, at the moment, the basic idea is that it is not an effect attacker. Thereby increasing safety.
For example, an attacker still picked the correct password. But without a key, it still will not let on. And it will continue to search, noting that combination is incorrect. Thus, the idea of ??busting meaningless. But note this attacker knows nothing ??
Perhaps the description of the plugin, not exactly correct. And it misled you. If you can offer the best option, I will be grateful to you.
When you fully hide the login form, you have a problem – will not be processed and routine inquiries, activation of the user, password recovery, etc.
I need to think about it yet.