• I want to try and prevent users sharing their login info to a website. There are several plugins that prevent concurrent logins, but don’t prevent a user from logging in one day, passing their info to a friend to log in another day etc.

    Does anyone know of any plugins that will also log the IP on first login and prevent other IP’s from logging in with that same user account?

    Or are there any hooks to try and do this myself if there are no plugins available?

    Thanks

    • This topic was modified 4 years, 7 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Developing with WordPress topic
Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    Moved to Fixing WordPress, this is not an Developing with WordPress topic. Please limit that sub-forum to code questions. This is not a code question, it’s a plugin ask.

    I want to try and prevent users sharing their login info to a website.

    This is good. This plugin may help you do just that.

    https://www.ads-software.com/plugins/loggedin/

    *Drinks coffee*

    Another way is to implement and enforce Two Factor authentication (2FA) on your site.

    https://www.ads-software.com/plugins/search/2FA/

    That alone won’t stop users from sharing auth codes but it they need to send that to the other person then that sharing will get old real quick.

    Thread Starter candell

    (@candell)

    Thanks Jan

    Hi candell, I have your SAME problem:-)))
    Did you solve? And, if so, how?
    I would be really happy to know a reliable and lean solution to be able to lock the accesses to my video course site and prevent the transfer of access credentials between users …

    Thread Starter candell

    (@candell)

    Hi

    I tried a few plugins for the concurrent login but they aren’t very reliable as it was kicking myself out of the website, using the same computer with the same static IP. I ended up turning it off as I had lots of people who genuinely could not log in. There were also others who used a laptop then used a tablet/mobile at the same location (same IP) who would be locked out.

    I might try 2FA next but again it isn’t stopping sharing of acccounts, just makes it more of a PITA.

    Ideally we need a reliable solution that logs the IP on first visit and only prevents other IP’s from using the same credentials. Obvuosly there will be some people who genuinely need unlocking such as those who may log in at work and again at home but these will be the minority for my website.

    If you find anything yourself, please let me know ??

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Prevent sharing login info’ is closed to new replies.