ArmorPro
WordPress security plugin with firewall, brute force protection, 2FA, passkeys, and more. Setup guides, feature documentation, and troubleshooting.
Getting Started
Features
Brute Force Protection
Login attempt limits, lockout durations, bot protection, auto-blacklist, and XML-RPC/REST API hardening.
Firewall & Patterns
String-matching firewall with 600+ patterns, input normalization pipeline, and 5 scan categories. Per-pattern toggles, custom patterns, hit tracking, and response codes.
Enhanced Firewall (WAF)
PHP-level firewall that runs before WordPress loads. Auto-detects server type, syncs patterns, and blocks requests in ~1ms.
Access Control
IP whitelist, permanent blacklist with expiry, and country-based access control with GeoIP.
Two-Factor Authentication
TOTP-based 2FA with any authenticator app. Per-role enforcement, backup codes, and compliance tracking.
Passkey Authentication
Passwordless login with Face ID, Touch ID, Windows Hello, or hardware security keys via WebAuthn/FIDO2.
Custom Login URL
Hide wp-login.php behind a custom URL slug. Original login returns 404.
Security Headers
HTTP security headers including X-Content-Type, X-Frame-Options, HSTS, Content Security Policy, and Permissions Policy.
Obfuscation & Hardening
Author slug obfuscation, email address encoding, and user enumeration prevention.
Email Notifications
Real-time security alerts and daily/weekly digest emails for login blocks, firewall matches, and admin logins.
Settings & Tools
Global settings reference, health checks, database repair, settings export/import, and factory reset.