Title: Authlify – Custom Login URL, Login Security, 2FA &amp; Login Page Designer
Author: MantraBrain
Published: <strong>Augustus 29, 2019</strong>
Last modified: September 30, 2026

---

Soek deur uitbreidings

![](https://ps.w.org/modify-login/assets/banner-772x250.png?rev=3720145)

![](https://ps.w.org/modify-login/assets/icon.svg?rev=3720145)

# Authlify – Custom Login URL, Login Security, 2FA & Login Page Designer

 Deur [MantraBrain](https://profiles.wordpress.org/mantrabrain/)

[Laai Af](https://downloads.wordpress.org/plugin/modify-login.3.0.1.zip)

 * [Besonderhede](https://af.wordpress.org/plugins/modify-login/#description)
 * [Aanbevelings](https://af.wordpress.org/plugins/modify-login/#reviews)
 *  [Installation](https://af.wordpress.org/plugins/modify-login/#installation)
 * [Ontwikkeling](https://af.wordpress.org/plugins/modify-login/#developers)

 [Hulp](https://wordpress.org/support/plugin/modify-login/)

## Beskrywing

**Authlify** (formerly Modify Login) is an all-in-one WordPress login security plugin.
It hides your login page properly, stops brute-force attacks, adds CAPTCHA, two-
factor login and passkeys, and lets you design every login screen. All of that is
free, on as many sites as you like.

[Website](https://matrixaddons.com/plugins/authlify/) | [All features](https://matrixaddons.com/plugins/authlify/#features)
| [Free vs Pro](https://matrixaddons.com/plugins/authlify/#compare) | [Documentation](https://matrixaddons.com/plugins/authlify/docs/)
| [Authlify Pro](https://matrixaddons.com/plugins/authlify/#pro) | [Support](https://wordpress.org/support/plugin/modify-login/)

#### Why Authlify

 * **One plugin instead of four.** A custom login URL (like WPS Hide Login), login
   lockouts (like Limit Login Attempts Reloaded), two-factor login (like Two Factor
   or WP 2FA) and a login page designer (like LoginPress), all built to work together.
 * **A hidden login that is actually hidden.** Most hide-login setups leak the secret
   address through /wp-admin/, /login, password-reset links or emails. Authlify 
   closes those routes, and its built-in **Leak Check** proves it on your own site.
 * **Built so you never lock yourself out.** A new login URL must be confirmed before
   it applies, the address is emailed to you, and there are wp-config.php and WP-
   CLI recovery options for every setting.
 * **Modern sign-in, free.** Passkeys (Face ID, Touch ID, Windows Hello, security
   keys), authenticator apps and backup codes, with a two-factor step that matches
   your login design.
 * **Private by design.** The activity log stays on your server, the self-hosted
   ALTCHA CAPTCHA needs no third party, and nothing is sent anywhere unless you 
   switch on a service that needs it.
 * **Calm to use.** A clear dashboard checklist, built-in documentation, no nag 
   banners, and no features switched on behind your back by an update.

#### Custom login URL and hide wp-admin

 * **Change the WordPress login URL** to something like yoursite.com/my-door. It
   works on Apache, Nginx and managed hosts, with no .htaccess edits.
 * **Hide wp-login.php and wp-admin** from logged-out visitors: they see your theme’s“
   page not found” page, an “access denied” message, or a redirect of your choice.
 * **Leak Check** requests your own site about 40 times, the way a visitor would,
   and tells you exactly what, if anything, gives the address away. It can re-check
   weekly and after every change.
 * **Confirm before it applies.** A new login URL works alongside the old one until
   you open it once, so a typo can’t lock you out.
 * Safe with page caches: the login page is never cached, and WP Rocket, LiteSpeed,
   SiteGround and Breeze exclusions are added automatically.
 * Links to the login page from WooCommerce, membership and LMS plugins are rewritten
   to your custom address.

#### Limit login attempts and brute-force protection

 * **Lockouts after too many failed logins**, per IP address and optionally per 
   network. Repeat lockouts get longer: 15 minutes, 1 hour, 4 hours, 1 day.
 * **Attackers can’t lock out the real admin.** A targeted account is never locked
   for everyone: it can ask for a CAPTCHA, and if the attack goes on it is paused
   only for addresses it has never logged in from. Its owner keeps logging in as
   usual and can always use an email unlock link.
 * Lockouts also cover **XML-RPC, the REST API and application passwords**, not 
   just the login form.
 * **Correct visitor IPs behind Cloudflare or your own proxy.** Faked forwarding
   headers are ignored, so lockouts can’t be dodged or pinned on someone else. Authlify
   detects your setup and suggests the right option.
 * Allow and block lists (IP addresses and CIDR ranges).
 * **Hardening:** switch off XML-RPC or its multi-password requests, hide usernames
   from the REST API and ?author= scans, limit application passwords, show generic
   login errors, and make the site private (force login) with public exceptions.

#### CAPTCHA on login, registration, comments and WooCommerce

 * **Cloudflare Turnstile, hCaptcha, Google reCAPTCHA v2 and v3**, and **ALTCHA**,
   a self-hosted, privacy-friendly CAPTCHA with no third party at all. Plus an invisible
   honeypot.
 * On login, registration, lost password, comments and WooCommerce login, registration
   and lost-password forms.
 * Show it always, or only after failed logins.
 * Key checks before you switch it on, and a test mode that logs instead of blocking.

#### Two-factor authentication (2FA) and passkeys

 * **Authenticator apps** (Google Authenticator, Microsoft Authenticator, 1Password,
   Authy and others) with one-time **backup codes**.
 * **Passkeys:** sign in with Face ID, Touch ID, Windows Hello or a security key,
   plus a “Sign in with a passkey” button on the login page (PHP 8.0 or later with
   OpenSSL).
 * Each user sets up two-factor login on their own profile. Admins can reset it,
   and users can recover by email.
 * The two-factor step uses your login page design.
 * **Breached-password check:** optionally refuse passwords found in known data 
   breaches, using the privacy-preserving Have I Been Pwned range API.

#### Login page customizer and designer

 * A visual designer with a live preview of your real login page on desktop, tablet
   and phone.
 * **12 ready-made templates**, including split-screen, glass and dark, all checked
   for readable contrast.
 * **Match my site** builds a design from your theme’s colours, fonts and logo in
   one click.
 * Logo, background image, colours, fonts, form and button styles, and custom CSS.
 * Every login screen is styled: login, lost password, reset, registration, two-
   factor and lockout.
 * Import an existing design from LoginPress or Colorlib Login Customizer.

#### Login activity log

 * Every login, failed login, lockout and security change, with IP address and country(
   from Cloudflare’s country header, when the site is set up as behind Cloudflare).
 * Filter, search and export to CSV.
 * Stored only on your site, with a retention period, optional IP anonymization,
   and the WordPress privacy export and erase tools.
 * Optional email to the admin when an administrator account is locked out.

#### Redirects, recovery and tools

 * **Login and logout redirects** for everyone or per role.
 * **Never locked out:** the login URL is emailed to the site admin whenever it 
   changes; `define( 'AUTHLIFY_DISABLE_HIDE', true );` in wp-config.php brings wp-
   login.php back; locked-out users get an “email me an unlock link” option.
 * **WP-CLI:** `wp authlify url get|set|reset`, `wp authlify unlock`, `wp authlify
   lockouts`, `wp authlify reset_2fa` and `wp authlify leak-check`.
 * **Switch in one click** from WPS Hide Login, Limit Login Attempts Reloaded, Admin
   and Site Enhancements (ASE) and LoginPress: Authlify detects them and imports
   their settings.
 * Settings export and import between sites, Site Health checks, and multisite support.
 * **Built-in documentation** under Authlify  Docs, with a “Learn more” link on 
   every settings screen.

#### Our promise

No free feature will ever move into Pro. No nag banners. No emails switched on by
an update. Upgraded Modify Login sites keep their login URL and settings, and new
protections stay off until you turn them on.

#### Authlify Pro

Authlify is complete on its own. [Authlify Pro](https://matrixaddons.com/plugins/authlify/#pro)
is an add-on for sites with staff, customers or clients: rules instead of requests,
more ways to sign in, and a warning when something looks wrong. It needs the free
plugin, and every plan includes every Pro feature.

 * **[Require two-factor login by role](https://matrixaddons.com/plugins/authlify/#pro-2fa-rules):**
   a grace period and setup wizard, email codes, trusted devices, passkey-only roles
   and a coverage report for each role.
 * **[Social login and single sign-on](https://matrixaddons.com/plugins/authlify/#pro-social-login):**
   Google, Microsoft, Apple, GitHub and any OpenID Connect provider (Okta, Auth0,
   Keycloak, Entra ID), limited to your email domains if you like.
 * **[Passwordless and temporary access](https://matrixaddons.com/plugins/authlify/#pro-passwordless):**
   magic login links and sign-in codes by role, and temporary logins for support
   staff and clients that expire on their own.
 * **[Login alerts](https://matrixaddons.com/plugins/authlify/#pro-alerts):** new-
   device and new-country emails with a “This wasn’t me” link, and admin alerts 
   by email, Slack, Discord, Telegram, Microsoft Teams or signed webhooks.
 * **[Login by country, hours and a honeypot](https://matrixaddons.com/plugins/authlify/#pro-access-rules):**
   allow or refuse logins by country (with a local country database), limit roles
   to set days and hours, and ban IPs that keep trying the old login addresses.
 * **[22 premium login designs](https://matrixaddons.com/plugins/authlify/#pro-designs):**
   animated, video and seasonal backgrounds, branded emails, login and registration
   blocks, a popup login, a Site Editor login page and a WooCommerce My Account 
   skin.
 * **[Session control](https://matrixaddons.com/plugins/authlify/#pro-sessions):**
   maximum session length and devices per role, idle logout with a warning, and “
   log out everywhere”.
 * **[Password policy](https://matrixaddons.com/plugins/authlify/#pro-password-policy):**
   length, character rules, no reuse and expiry for chosen roles, plus a breached-
   password check at login.
 * **[Sudo mode](https://matrixaddons.com/plugins/authlify/#pro-sudo-mode):** people
   confirm it is them before plugin, theme, user and security changes.
 * **[WooCommerce](https://matrixaddons.com/plugins/authlify/#pro-woocommerce):**
   the two-factor step inside My Account, and a Security tab where customers manage
   two-factor login, passkeys and devices.
 * **[Insights and scheduled exports](https://matrixaddons.com/plugins/authlify/#pro-insights):**
   failed attempts by country, top IP addresses and targeted usernames, a weekly
   digest and scheduled CSV exports of the log.
 * **[Agency and multisite](https://matrixaddons.com/plugins/authlify/#pro-agency):**
   white-label, client handoff, network settings with per-site locks, and design
   sync between sites.
 * **[REST API and WP-CLI](https://matrixaddons.com/plugins/authlify/#pro-api-cli):**
   settings, the activity log, lockouts and the design over `/wp-json/authlify-pro/
   v1/`, plus bulk WP-CLI commands.

Plans: Personal (1 site), Plus (5 sites) and Agency (25 sites), yearly or lifetime,
with a 14-day money-back guarantee. If a licence lapses, Pro keeps working; the 
licence brings updates and support. [Compare Free and Pro](https://matrixaddons.com/plugins/authlify/#compare)·
[See pricing](https://matrixaddons.com/plugins/authlify/#pricing)

### External services

Authlify works without any external service. The services below are contacted only
when you switch the matching feature on, and only from the forms or screens listed.

**Cloudflare Turnstile** (when you choose Turnstile as the CAPTCHA provider). The
visitor’s browser loads the Turnstile script from challenges.cloudflare.com on the
protected forms, and your server sends the visitor’s answer token, your secret key
and the visitor’s IP address to challenges.cloudflare.com to verify it when the 
form is submitted. [Terms](https://www.cloudflare.com/website-terms/), [privacy policy](https://www.cloudflare.com/privacypolicy/),
[Turnstile privacy addendum](https://www.cloudflare.com/turnstile-privacy-policy/).

**hCaptcha** (when you choose hCaptcha). The browser loads the script from js.hcaptcha.
com on the protected forms, and your server sends the answer token, your secret 
key and the visitor’s IP address to api.hcaptcha.com on submit. [Terms](https://www.hcaptcha.com/terms),
[privacy policy](https://www.hcaptcha.com/privacy).

**Google reCAPTCHA** v2 or v3 (when you choose reCAPTCHA). The browser loads the
script from www.google.com on the protected forms, and your server sends the answer
token, your secret key and the visitor’s IP address to www.google.com/recaptcha/
api/siteverify on submit. [Terms](https://policies.google.com/terms), [privacy policy](https://policies.google.com/privacy).

**Have I Been Pwned – Pwned Passwords** (when you switch on the breached-password
check). When someone sets or resets a password, your server sends the first 5 characters
of the password’s SHA-1 hash to api.pwnedpasswords.com. The password and its full
hash never leave your site. [About Pwned Passwords](https://haveibeenpwned.com/Passwords),
[privacy policy](https://haveibeenpwned.com/Privacy).

ALTCHA and the honeypot run entirely on your own server. Leak Check only requests
your own site. The optional Authlify Pro add-on contacts store.mantrabrain.com for
licences and updates; that is described in its own readme.

## Screenshots

[⌊Dashboard with the protection checklist and this week's logins, failed attempts
and lockouts.⌉⌊Dashboard with the protection checklist and this week's logins, failed
attempts and lockouts.⌉[

Dashboard with the protection checklist and this week’s logins, failed attempts 
and lockouts.

[⌊Custom login URL with Leak Check, which proves the hidden address is not revealed
anywhere.⌉⌊Custom login URL with Leak Check, which proves the hidden address is 
not revealed anywhere.⌉[

Custom login URL with Leak Check, which proves the hidden address is not revealed
anywhere.

[⌊Brute-force protection with escalating lockouts and real visitor IP detection 
behind Cloudflare or a proxy.⌉⌊Brute-force protection with escalating lockouts and
real visitor IP detection behind Cloudflare or a proxy.⌉[

Brute-force protection with escalating lockouts and real visitor IP detection behind
Cloudflare or a proxy.

[⌊CAPTCHA providers: Cloudflare Turnstile, hCaptcha, reCAPTCHA and self-hosted ALTCHA.⌉⌊
CAPTCHA providers: Cloudflare Turnstile, hCaptcha, reCAPTCHA and self-hosted ALTCHA
.⌉[

CAPTCHA providers: Cloudflare Turnstile, hCaptcha, reCAPTCHA and self-hosted ALTCHA.

[⌊Two-factor login on each user's profile: authenticator app, passkeys and backup
codes.⌉⌊Two-factor login on each user's profile: authenticator app, passkeys and
backup codes.⌉[

Two-factor login on each user’s profile: authenticator app, passkeys and backup 
codes.

[⌊Sign in with a passkey, and a two-factor step that uses your login page design.⌉⌊
Sign in with a passkey, and a two-factor step that uses your login page design.⌉[

Sign in with a passkey, and a two-factor step that uses your login page design.

[⌊Login page designer with templates, Match my site and a live preview.⌉⌊Login page
designer with templates, Match my site and a live preview.⌉[

Login page designer with templates, Match my site and a live preview.

[⌊Free login page templates: Glass over photo, Split image right and Soft gradient.⌉⌊
Free login page templates: Glass over photo, Split image right and Soft gradient
.⌉[

Free login page templates: Glass over photo, Split image right and Soft gradient.

[⌊Activity log of logins, failed attempts and lockouts, with filters and CSV export.⌉⌊
Activity log of logins, failed attempts and lockouts, with filters and CSV export
.⌉[

Activity log of logins, failed attempts and lockouts, with filters and CSV export.

[⌊Built-in documentation, including how to get back in if you are ever locked out.⌉⌊
Built-in documentation, including how to get back in if you are ever locked out.⌉[

Built-in documentation, including how to get back in if you are ever locked out.

[⌊Switch from WPS Hide Login, Limit Login Attempts Reloaded, ASE or LoginPress in
one click.⌉⌊Switch from WPS Hide Login, Limit Login Attempts Reloaded, ASE or LoginPress
in one click.⌉[

Switch from WPS Hide Login, Limit Login Attempts Reloaded, ASE or LoginPress in 
one click.

[⌊Free vs Pro: every core protection is free. Authlify Pro adds team, store and 
agency features.⌉⌊Free vs Pro: every core protection is free. Authlify Pro adds 
team, store and agency features.⌉[

Free vs Pro: every core protection is free. Authlify Pro adds team, store and agency
features.

## Installation

 1. Install and activate Authlify from Plugins  Add New.
 2. Open **Authlify  Login URL**, choose a private address and open the confirmation
    link. Nothing is hidden until you do this.
 3. Review the protections under **Authlify  Security**. Brute-force lockouts are on
    for new installs; CAPTCHA and hardening options are yours to switch on.
 4. Follow the checklist on the **Authlify** dashboard: it shows what is protected 
    and what to set up next.
 5. Optional: set up two-factor login or a passkey on your profile, and pick a design
    under **Authlify  Designer**.
 6. Stuck? **Authlify  Docs** has a getting-started guide and a troubleshooting section.

## Kwel-vrae

### Is Authlify free?

Yes. Everything described above, including the custom login URL, lockouts, every
CAPTCHA provider, two-factor login, passkeys, the designer and the activity log,
is free with no limits and no expiry. [Authlify Pro](https://matrixaddons.com/plugins/authlify/#pro)
is an optional add-on for teams, stores and agencies.

### I forgot my custom login URL. How do I get in?

Check your email: Authlify sends the login address to the site admin email every
time it changes. You can also add `define( 'AUTHLIFY_DISABLE_HIDE', true );` to 
wp-config.php to bring back wp-login.php, or run `wp authlify url get` with WP-CLI.

### I’m locked out after too many failed logins. What now?

Wait for the lockout to end, or use the “email me an unlock link” option on the 
lockout screen. With WP-CLI, `wp authlify unlock --all` lifts every lockout. Add
your own IP address to the “Never lock out” list to avoid it in future.

### How is this different from WPS Hide Login?

Both change the login URL without touching .htaccess. Authlify also closes the routes
that commonly leak the secret address (such as /wp-admin/, /login, password-reset
and signup links, the Customizer and privacy emails), proves it with Leak Check,
asks you to confirm a new address before it applies, and adds lockouts, CAPTCHA,
two-factor login, passkeys and a login designer. It can import your WPS Hide Login
address in one click.

### Can it replace Limit Login Attempts Reloaded?

Yes for most sites: lockouts per IP and network, escalating lockout lengths, allow
and block lists, lockout emails, a log with CSV export, and correct IPs behind Cloudflare
or a proxy, all free. It can import your Limit Login Attempts Reloaded settings.

### Does hiding the login page make my site secure?

It stops the huge volume of automated attacks on wp-login.php, which saves server
resources and log noise. Pair it with lockouts, CAPTCHA and two-factor login for
real protection. Leak Check also shows what a hidden URL does not cover, such as
XML-RPC and application passwords.

### Which CAPTCHA should I use?

Cloudflare Turnstile is free and invisible for most visitors. ALTCHA runs entirely
on your own server, so no visitor data goes to a third party. hCaptcha and reCAPTCHA
v2/v3 are also supported. You can show the CAPTCHA only after failed logins.

### Do passkeys replace passwords?

They can. Once a user adds a passkey on their profile, they can sign in with the“
Sign in with a passkey” button and Face ID, Touch ID, Windows Hello or a security
key, or use it as their second step. Passkeys need PHP 8.0 or later with the OpenSSL
extension, and a site on https.

### Does it work with WooCommerce, membership and LMS plugins?

Yes. WooCommerce My Account login keeps working and gets the same lockouts and CAPTCHA.
Links to the login page from other plugins are rewritten to your custom address 
automatically.

### Does it work behind Cloudflare or a load balancer?

Yes. Choose “Through Cloudflare” or “Through my own proxy” under Security  Brute
force, so lockouts use each visitor’s real IP address. Authlify detects your setup
and suggests the right option.

### Does it work with caching plugins?

Yes. The login page is never cached, and exclusions for WP Rocket, LiteSpeed Cache,
SiteGround Optimizer and Breeze are added automatically. Site Health tells you if
another cache needs a manual exclusion.

### Is it GDPR friendly?

The activity log stays on your site, is deleted after the retention period you choose,
can store anonymized IPs, and is covered by the WordPress personal-data export and
erase tools. ALTCHA and the honeypot need no third-party service at all. Suggested
privacy-policy text is added to Settings  Privacy. The external services a feature
may use are listed under “External services” above.

### Will it conflict with other security plugins?

Turn off login-URL or lockout features in other plugins that do the same job. If
another two-factor plugin (Two Factor, WP 2FA or Wordfence) is active, Authlify 
leaves two-factor login to it and tells you.

### Does it support multisite?

Yes. When network-activated, one set of settings, one login URL and one activity
log cover the whole network.

### I was upgraded from Modify Login. What changed?

Your login URL, redirect settings, reCAPTCHA keys and login log carry over unchanged.
New protections (lockouts, new CAPTCHA providers, two-factor login) stay off until
you switch them on. The old settings stay in the database in case you roll back.

### What is the difference between Authlify and Authlify Pro?

Free covers everything one site needs to protect its login. Pro adds two-factor 
rules by role, social login and single sign-on, passwordless and temporary access,
login alerts, country and hours rules, session and password policies, 22 premium
designs and agency tools. See the [full comparison](https://matrixaddons.com/plugins/authlify/#compare),
or **Authlify  Free vs Pro** in your dashboard.

### Where do I get help?

Start with **Authlify  Docs** in your dashboard. For free support, open a topic 
in the [support forum](https://wordpress.org/support/plugin/modify-login/). Authlify
Pro customers get email support; see [the Authlify page](https://matrixaddons.com/plugins/authlify/)
for details.

## Aanbevelings

![](https://secure.gravatar.com/avatar/2b47766430d339441304241d3f9b5a6ba527ccba0da798361a2e47097c9c61b8?
s=60&d=retro&r=g)

### 󠀁[login modified](https://wordpress.org/support/topic/login-modified/)󠁿

 [Gaál Sándor](https://profiles.wordpress.org/gmac4247/) Maart 9, 2021 2 replies

Inspite of the plugin really changes the URLs, the number of brute force attacks
keeps on rising.

 [ Read all 1 review ](https://wordpress.org/support/plugin/modify-login/reviews/)

## Contributors & Developers

“Authlify – Custom Login URL, Login Security, 2FA & Login Page Designer” is oopbron
sagteware. Die volgende mense het bygedra tot die ontwikkeling van hierdie uitbreiding:

Contributors

 *   [ MantraBrain ](https://profiles.wordpress.org/mantrabrain/)

“Authlify – Custom Login URL, Login Security, 2FA & Login Page Designer” has been
translated into 1 locale. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/modify-login/contributors)
for their contributions.

[Translate “Authlify – Custom Login URL, Login Security, 2FA & Login Page Designer” into your language.](https://translate.wordpress.org/projects/wp-plugins/modify-login)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/modify-login/), check
out the [SVN repository](https://plugins.svn.wordpress.org/modify-login/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/modify-login/) by
[RSS](https://plugins.trac.wordpress.org/log/modify-login/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 3.0.1 – 2026/09/30

 * Improved: the built-in help and readme describe the real defaults (lockouts, 
   the activity log and the weekly Leak Check are on for new sites, the honeypot
   is off), the account pause, IPv6 network lockouts (/48) and the PHP 8 requirement
   for passkeys.
 * Improved: a link to the online documentation on the Docs screen, and videos of
   Authlify and Authlify Pro in the readme.

#### 3.0.0 – 2026/09/29

 * New name: Modify Login is now **Authlify**. Your settings, login URL and log 
   carry over.
 * Security: closed two ways to reach the login page without the custom URL, fixed
   a fatal error when reCAPTCHA could not be reached, and stopped sending visitor
   IPs to a third-party location service.
 * Rebuilt login URL hiding: WordPress no longer reveals the secret address through/
   wp-admin/, /login, /admin, /dashboard, wp-signup.php, the Customizer, privacy
   emails or encoded paths. Works on Nginx and managed hosts (no rewrite rules).
 * New: Leak Check self-test, confirm-before-apply for new login URLs, login-URL
   email, WP-CLI commands and wp-config recovery constants.
 * New: brute-force lockouts per IP, network and targeted account, escalating lockouts,
   trusted-proxy IP detection, allow/block lists and email unlock links.
 * New: Cloudflare Turnstile, hCaptcha, reCAPTCHA v3 and self-hosted ALTCHA CAPTCHAs
   on core and WooCommerce forms, plus a honeypot.
 * New: two-factor login (authenticator apps, backup codes) and passkeys.
 * New: breached-password check (Have I Been Pwned, privacy-preserving).
 * New: login page designer with 12 templates, “Match my site”, live preview and
   full coverage of every login screen.
 * New: activity log with filters, CSV export, retention, IP anonymization and privacy
   tools. No more third-party IP lookups.
 * New: per-role redirects, XML-RPC, username-discovery and application-password
   controls, private-site mode, settings import/export and importers from WPS Hide
   Login, Limit Login Attempts Reloaded, Admin and Site Enhancements and LoginPress.
 * New: built-in, searchable documentation under Authlify  Docs.
 * Requires WordPress 6.4 or later.

#### 2.0.2 – 2026/08/21

 * Fixed: The 2.0.1 release never reached anyone. WordPress.org reads the version
   from the `Version:` header in the main plugin file, and that header was still
   2.0.0, so the directory kept advertising 2.0.0 and no installation was ever offered
   the update. The header is now correct, and the version is defined in one place
   so it cannot drift again.
 * Update: WordPress 7.1 compatibility. Every WordPress function the plugin calls
   was cross-checked against the 7.1 codebase; none are deprecated or removed.
 * Fixed: The Login Logs screen requested `assets/dist/admin/js/logs.min.js`, which
   has never existed, producing a 404 on every visit.
 * Fixed: The login page builder appended a timestamp to its asset URLs, so its 
   CSS and JavaScript were re-downloaded on every page load instead of being cached.
 * Fixed: Added the translation template the plugin’s `Domain Path` has always pointed
   at.
 * Update: Raw sources and source maps are no longer shipped in the plugin package.

#### 2.0.1 – 2025-04-24

 * Added: Complete UI redesign with modern interface
 * Added: Visual login page builder with live preview
 * Added: Background image customization with opacity, position and size controls
 * Added: Logo customization options
 * Added: Form styling options with color picker
 * Added: Button styling customization
 * Added: Login/logout custom redirects
 * Added: Google reCAPTCHA integration
 * Added: Login attempt tracking and logging
 * Added: Custom CSS support
 * Improved: Better security measures for login protection
 * Improved: Code architecture and performance optimization
 * Improved: Documentation and user guidance
 * Fixed: Various bugs and compatibility issues
 * Fixed: Plain permalink issue resolved

## Meta

 *  Version **3.0.1**
 *  Last updated **2 dae gelede**
 *  Active installations **10+**
 *  WordPress version ** 6.4 or higher **
 *  Tested up to **7.1.2**
 *  PHP version ** 7.4 or higher **
 *  Languages
 * [English (US)](https://wordpress.org/plugins/modify-login/) en [Russian](https://ru.wordpress.org/plugins/modify-login/).
 *  [Vertaal na jou taal](https://translate.wordpress.org/projects/wp-plugins/modify-login)
 * Tags
 * [hide login](https://af.wordpress.org/plugins/tags/hide-login/)[limit login attempts](https://af.wordpress.org/plugins/tags/limit-login-attempts/)
   [login customizer](https://af.wordpress.org/plugins/tags/login-customizer/)[passkeys](https://af.wordpress.org/plugins/tags/passkeys/)
   [two factor](https://af.wordpress.org/plugins/tags/two-factor/)
 *  [Gevorderde Aansig](https://af.wordpress.org/plugins/modify-login/advanced/)

## Punte-toekennings

 1 out of 5 stars.

 *  [  0 5-star reviews     ](https://wordpress.org/support/plugin/modify-login/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/modify-login/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/modify-login/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/modify-login/reviews/?filter=2)
 *  [  1 1-star review     ](https://wordpress.org/support/plugin/modify-login/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/modify-login/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/modify-login/reviews/)

## Contributors

 *   [ MantraBrain ](https://profiles.wordpress.org/mantrabrain/)

## Hulp

Got something to say? Need help?

 [Gaan na die hulp-forum](https://wordpress.org/support/plugin/modify-login/)

## Skenk

Wil jy graag die ontwikkeling van hierdie uitbreiding ondersteun?

 [ Skenk aan hierdie uitbreiding ](https://mantrabrain.com)