Oiko Guard
Login hardening and two-factor auth in one lean plugin — replacing the three or four most sites stitch together.
- Brute-force lockout plus TOTP 2FA, with one-time recovery codes
- Turnstile or reCAPTCHA — and a honeypot that filters bots first
- XML-RPC and user-enumeration closed; optional custom login URL
- Login audit log, session control, new-device alerts