Login Security Plugin
The Wordfence Login Security plugin contains a subset of the features found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection and Login Page CAPTCHA. It is ideal for sites that need login security functionality but either can’t or don’t want to run the full Wordfence plugin.
DEPRECATION NOTICE: The standalone Login Security plugin will be discontinued around July 1, 2026. Sites using it should install the full Wordfence plugin to retain Login Security functionality.
Documentation for the features found in the Wordfence Login Security plugin:
- Two-Factor Authentication option for site administrators, including XML-RPC protection
- How to use Two-Factor Authentication for users
- Login Page CAPTCHA options
If you install the full Wordfence plugin after using our Login Security plugin then all user accounts in WordPress that previously had two-factor authentication setup and active will still have two-factor authentication that is active.
All of your settings from the Login Security plugin will be found under the Settings tab of the Login Security page which you can find by clicking on the Login Security menu item in the full Wordfence plugin menu.
You can then uninstall the Login Security plugin if you wish from the WordPress Plugins page.