{"id":11276,"date":"2026-05-28T23:30:06","date_gmt":"2026-05-28T15:30:06","guid":{"rendered":"https:\/\/aeosub.com\/msc-stealth-login\/"},"modified":"2026-05-28T23:30:06","modified_gmt":"2026-05-28T15:30:06","slug":"msc-stealth-login","status":"publish","type":"post","link":"https:\/\/aeosub.com\/zh\/msc-stealth-login\/","title":{"rendered":"MSC Stealth Login"},"content":{"rendered":"
\"MSC<\/div>\n
\n\n\n\n\n\n\n\n
Developer<\/th>\ndjm56<\/a><\/td>\n<\/tr>\n
Version<\/th>\nv1.0.8<\/td>\n<\/tr>\n
Active Installs<\/th>\n0 +<\/td>\n<\/tr>\n
Requires \/ Tested<\/th>\n5.9 \/ 7.0<\/td>\n<\/tr>\n
Last Updated<\/th>\n2026-05-28 3:16pm GMT<\/td>\n<\/tr>\n
Official Link<\/th>\nView Details \u2192<\/a><\/td>\n<\/tr>\n<\/table><\/div>\n
Hide your WordPress login page from attackers. Protect against brute force with custom URLs, lockouts, and email alerts.<\/div>\n

MSC Stealth Login provides comprehensive protection for your WordPress login page, blocking attackers while keeping your site accessible to legitimate users.<\/p>\n

Stealth Login URL<\/strong><\/p>\n

Change your login page from \/wp-login.php<\/code> to a custom URL like \/secure-login\/<\/code>. Attackers scanning for standard WordPress login pages will be blocked before they can even attempt a brute force attack.<\/p>\n

wp-admin Protection<\/strong><\/p>\n

Block direct access to \/wp-admin\/<\/code> for users who aren’t logged in. They’ll be redirected to your custom login page instead, preventing exposure of your admin area.<\/p>\n

Brute Force Protection<\/strong><\/p>\n

After failed login attempts, MSC Stealth Login progressively increases lockout durations. First-time offenders wait 15 minutes, repeat offenders face increasingly longer delays. This stops automated attacks while minimizing disruption to real users who mistype their password.<\/p>\n

Email Notifications<\/strong><\/p>\n

Stay informed about security events with configurable email alerts:<\/p>\n

    \n
  • Lockout notifications when IPs are blocked<\/li>\n
  • Admin login alerts for every administrator sign-in<\/li>\n
  • New IP alerts when users log in from previously unseen locations<\/li>\n<\/ul>\n

    Login History & Export<\/strong><\/p>\n

    Track all login attempts with detailed logging. Filter by IP address, username, result type, or date range. Export reports to CSV for security audits.<\/p>\n

    XML-RPC & REST API Protection<\/strong><\/p>\n

    Disable vulnerable XML-RPC endpoints commonly exploited for brute force attacks. Block REST API user enumeration that lets attackers harvest usernames.<\/p>\n

    IP Whitelist<\/strong><\/p>\n

    Bypass protection for trusted IP addresses. Add your office, home, or server IPs to ensure uninterrupted access while maintaining maximum security for everyone else.<\/p>\n

    Progressive Lockout System<\/strong><\/p>\n

    Unlike simple lockouts that reset immediately, MSC Stealth Login uses a multiplier system. Each successive lockout doubles the wait time (15 min \u2192<\/span> 30 min \u2192<\/span> 60 min \u2192<\/span> 120 min). The multiplier resets after 24 hours without an attempt, balancing security with usability.<\/p>\n

    Recovery URL<\/strong><\/p>\n

    Forgot your custom login URL? No problem. The recovery system lets you regain access through a secure bypass URL that’s displayed in your WordPress admin bar when logged in.<\/p>\n

    Privacy<\/h3>\n

    MSC Stealth Login collects the following data to provide its security features:<\/p>\n

      \n
    • IP Addresses<\/strong>: Logged for every login attempt (successful, failed, and locked out) to enable brute force protection and login history.<\/li>\n
    • Usernames<\/strong>: Logged with each login attempt to help administrators identify targeted accounts.<\/li>\n
    • User Agents<\/strong>: Logged with each login attempt for security auditing.<\/li>\n
    • Login History<\/strong>: All login attempts are stored in the database and can be viewed in the History tab or exported as CSV.<\/li>\n<\/ul>\n

      Data collection only occurs when the plugin is active. All collected data is stored in your WordPress database and is not sent to any external services. Administrators can clear login history at any time from the History tab.<\/p>\n

      This plugin does not use cookies or third-party tracking.<\/p>","protected":false},"excerpt":{"rendered":"

      Hide your WordPress login page from attackers. Protect against brute force with custom URLs, lockouts, and email alerts.<\/p>","protected":false},"author":1,"featured_media":9317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[252],"tags":[1101,1028,664,2407,555,2060],"class_list":["post-11276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trends","tag-brute-force","tag-login","tag-security","tag-stealth","tag-wordpress-plugin","tag-wp-admin"],"_links":{"self":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/comments?post=11276"}],"version-history":[{"count":0,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11276\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media\/9317"}],"wp:attachment":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media?parent=11276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/categories?post=11276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/tags?post=11276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}