Admin Safety Guard — Login Security & 2FA

Περιγραφή

Admin Safety Guard is a complete WordPress security helper focused on securing the login flow and hardening the admin area — without sacrificing usability or performance. It ships with a clean UI, smart defaults, and guardrails against the most common attacks (brute force, credential stuffing, bot logins, and XML-RPC abuse). You also get granular control over the login experience (custom URL, redirects, branding, and more).

Whether you need to block suspicious IPs, enforce two-factor authentication, or ship a branded login for clients, Admin Safety Guard has you covered.

🌟 Admin Safety Guard Pro

Admin Safety Guard Pro takes your security and customization to the next level. It strengthens defenses against unauthorized access, brute-force attacks, and data risks while giving you deeper control over how users log in and interact with your admin area. The Pro version also adds flexible design tools and smart automations — a complete solution for both security and convenience.

👥 Who Should Use Admin Safety Guard?

Admin Safety Guard is perfect for users who need more control, security, and customization in their WordPress admin area:

👩‍💻 Freelancers & Developers: Add backend security and branding to client sites—no heavy coding.
🏢 Agencies & Teams: Secure multiple websites with a single workflow and consistent branding.
🔒 Site Owners: Protect dashboards from brute-force attacks and unauthorized logins.
🧩 Plugin/Theme Authors: Add layered protection in demo or test environments.
📈 Online Businesses: Secure customer data with 2FA, CAPTCHA, and password protection.
🎓 Educators & Bloggers: Maintain a professional look while increasing security.

✅ Free Features at a Glance

• Hide Admin Bar (with conditions)
• Dashboard Overview (in progress)
• Change Login URL
• Redirect After Login / Logout
• Limit Login Attempts
• CAPTCHA Protection
• Login Logs & Activity Tracking
• IP Blocking
• Two-Factor Authentication (2FA)
• Password Protection
• Disable XML-RPC
• Add Custom Logo on Login Form
• Custom Logo & Branding

💎 Premium Feature List

• Passwordless Login
• 2FA via Mobile App (TOTP)
• CSRF Protection
• Database Table Prefix Check
• Whitelist IP Addresses
• Hide Admin Bar
• WP Directory File Permissions Check
• Social Login (Google, Facebook, etc.)
• Disallow Unauthorized REST Requests
• Password Strength Tool
• Provide Login Template (ready-made)
• Customize Design Pro (advanced styling)
• Email Notification

Free Feature Details

👤 Hide Admin Bar (With Conditions): Hide the admin bar selectively for specific users or roles.
📊 Dashboard Overview: Visualize user activity and security stats in one glance.
🔗 Change Login URL: Customize the default wp-login.php to block automated bots.
🔁 Redirect After Login/Logout: Redirect users to any page after login/logout.
📋 Limit Login Attempts: Block repeated failed logins to prevent brute-force attacks.
🤖 CAPTCHA Protection: Stop bots with reCAPTCHA or similar human verifications.
🕵️‍♂️ Login Logs & Activity Tracking: Track user login times and backend actions.
⛔ IP Blocking: Block access by IP address to prevent hostile logins.
🔐 Two-Factor Authentication (2FA): Add extra verification layers to secure logins.
🛂 Password Protection: Protect private pages or areas with a password.
⚙️ Disable XML-RPC: Disable vulnerable XML-RPC endpoints to stop exploits.
🖼️ Custom Logo on Login Form: Replace WordPress logo with your brand.
🏷️ Custom Branding: Apply your own design across login and admin pages.

🔐 Pro Feature Details

🔑 Passwordless Login: Secure email-based login with one-time magic links—no password required.
📱 2FA via Mobile App: Add app-based Two-Factor Authentication (Google Authenticator / Authy).
🧩 CSRF Protection: Prevent Cross-Site Request Forgery attacks with token verification.
🗃️ Database Table Prefix Check: Detects and helps change the insecure wp_ prefix.
🌐 Whitelist IP Addresses: Restrict admin access to trusted IPs only.
🧑‍💻 Hide Admin Bar (Conditional): Show or hide admin bar for specific roles or users.
🗂️ WP Directory File Permissions Check: Scans and verifies file and directory permissions.
🌍 Social Login: Allow users to log in with Google, Facebook, or Twitter accounts.
🚫 Disallow Unauthorized REST Requests: Restrict REST API access conditionally.
💪 Password Strength Tool: Enforce strong password rules for better protection.
🎨 Provide Login Template: Instantly apply stylish, ready-to-use login templates.
🧰 Customize Design Pro: Fully customize admin and login design with a simple UI.
📧 Email Notification: Receive and customize security alerts directly to your inbox.

Explore Pro Features: Admin Safety Guard Pro

Support

For any issues, questions, or feature requests, please reach out via Support.

External Services

This plugin uses the following third-party and external services:

1) Google reCAPTCHA (Google LLC)

Purpose:
Used to protect forms from spam and automated abuse.

When it is used:
– When reCAPTCHA is enabled in plugin settings
– On login forms and support forms protected by reCAPTCHA

What data is sent:
– User IP address
– reCAPTCHA response token generated by Google
– Browser information as required by Google reCAPTCHA

Service provider:
Google LLC

Terms of Service:
https://policies.google.com/terms

Privacy Policy:
https://policies.google.com/privacy

2) ThemePaste API (Plugin Author Service)

Purpose:
Used for:
– Collecting optional admin email addresses for plugin updates and notifications
– Sending support requests from the plugin support form

When it is used:
– When a user submits the built-in support form
– When a user opts to send diagnostic information

What data is sent:
– Name
– Email address
– Phone number (if provided)
– Message content
– Site URL
– Plugin name

No data is sent without user action.

Service provider:
ThemePaste.com

Terms of Service:
https://themepaste.com/terms-condition

Privacy Policy:
https://themepaste.com/privacy-policy

Development / Source Code

This plugin includes compiled JavaScript bundles in:
– assets/admin/build/*.bundle.js

The original (human-readable) source files are included in this plugin under:
– spa/admin/

Build Tools
– Node.js (LTS recommended)
– npm
– Webpack + Babel

Source Entry Points
The admin SPA bundles are built from the following entry points:

• spa/admin/login-template/Main.jsx -> assets/admin/build/loginTemplate.bundle.js
• spa/admin/login-logs-activity/Main.jsx -> assets/admin/build/loginLogActivity.bundle.js
• spa/admin/analytics/Main.jsx -> assets/admin/build/analytics.bundle.js
• spa/admin/security-core/Main.jsx -> assets/admin/build/securityCore.bundle.js
• spa/admin/firewall-malware/Main.jsx -> assets/admin/build/firewallMalware.bundle.js
• spa/admin/privacy-hardening/Main.jsx -> assets/admin/build/privacyHardening.bundle.js
• spa/admin/monitoring-analytics/Main.jsx -> assets/admin/build/monitoringAnalytics.bundle.js

Install Dependencies
From the plugin root directory (or the directory where package.json exists):

1) Install dependencies:
npm install

Build (Production)
To generate the production bundles:

npm run build

Output Location
Webpack outputs the compiled bundles to:

• assets/admin/build/[name].bundle.js

Important Notes
– Do not edit files in assets/admin/build/ directly. They are generated files.
– Edit the source files under spa/admin/ and re-run the build command.
– For WordPress.org distribution, production builds should be used (mode=production).

Links

Website
Documentation
Pro Version
Facebook
Pinterest
LinkedIn
Instagram