Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Plamen M

    (@plamenm)

    Hello @nikodemsky ,

    Thank you for your suggestion. I will pass it on to our plugin developers. However, allow me to note that allowing too high of a value compromises the meaning of this function. If it allows a malicious user to probe your passwords for too many times, they could easily place a wait time then start probing again and get into the site eventually. All serious security systems would force the user to go through the password reset option if they get it wrong for more than 5 attempts in a row.

    Regards,
    Plamen Martinov
    Tech Support Team
    SiteGround.com

    Thread Starter Nikodemsky

    (@nikodemsky)

    I understand that, but from my experience sometimes even 10 login attempts from people is within “i forgot” ?? Brute force logins are almost always 20+ attempts, at least from my experience.

    Plugin Support Plamen M

    (@plamenm)

    Well, in these cases, disabling the Limit Login Attempts would be more reasonable than having a feature which would allow hackers to go around it so easily. Then you can rely on the other security options in the plugin for the protection of your site.

    Despite of this, I already passed your suggestion on to our plugin developers.

    Regards,
    Plamen Martinov
    Tech Support Team
    SiteGround.com

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘More limit login attempts’ is closed to new replies.