Featured · New in 3.0
FluentAuth 3.0 is here
Meet FluentAuth 3.0: passkeys, authenticator apps, a redesigned admin, expanded security tools and a new website.
Read the announcement →The FluentAuth blog
Guides, how-tos & the thinking behind the plugin.
Login-security guides, passwordless how-tos and release notes for people who run WordPress sites.
AgencyAudit WordPress administrator access before it becomes a problem
Review account ownership, permissions and verification so old projects do not leave unnecessary access behind.
TutorialsMake your WordPress login page feel like your site
Use your logo, welcome copy and colours, then connect the login experience with redirects and branded emails.
ReleasesFluentAuth 3.0 is here
Meet FluentAuth 3.0: passkeys, authenticator apps, a redesigned admin, expanded security tools and a new website.
TutorialsLocked out of WordPress? Find the cause before changing settings
Identify an attempt limit, an IP rule or a missing second factor, then recover access with the smallest necessary change.
SecurityHow to review WordPress file changes
Understand modified, extra and unverified files before restoring anything. A practical workflow for FluentAuth monitoring.
SecurityWhat your WordPress login log is telling you
Turn failed attempts, blocked addresses and unfamiliar sign-ins into a practical investigation with FluentAuth's activity log.
SecurityWordPress application passwords: keep, replace or revoke?
Review the credentials behind integrations and understand what FluentAuth blocks or revokes before changing them.
SecuritySuspect a WordPress compromise? A practical response sequence
Preserve useful evidence, contain account access and investigate files before deciding that recovery is complete.
SecurityLimit WordPress login attempts without frustrating your users
Choose a sensible attempt limit, understand shared addresses and pair brute-force protection with stronger account verification.
AgencyA practical WordPress login policy for a growing team
Choose protection by role, help members sign in and give your team a clear way to review activity. A practical FluentAuth rollout for an existing site.
TutorialsSet up passkey verification for WordPress
Enable passkeys by role, register your device and keep a recovery route before relying on device verification.
SecurityA convincing WordPress login page can still be the wrong one
Help your team recognise suspicious sign-in requests and understand where passkeys, email and recovery fit.
TutorialsWordPress security alerts you can actually act on
Choose who receives login alerts, use digests for routine review and build a response plan that keeps useful notifications from being ignored.
SecurityA practical WordPress security checklist
Review privileged accounts, login protections, exposed files and monitoring with FluentAuth.
SecurityWhy signing everyone out matters after suspicious access
Understand sessions, application credentials and password-reset requests before using FluentAuth recovery tools.
SecurityShould you disable XML-RPC on your WordPress site?
Understand what XML-RPC does, what FluentAuth changes and how to test connected services before restricting it.
PasswordlessPasswordless login for WordPress membership sites
Password resets are where members give up. Give them a magic link or a Google button instead, and keep the password and the second factor for the people who run the site.
TutorialsHow to add two-factor authentication to WordPress admin
A stolen password should not be enough. Turn on a second factor for administrators in five minutes, by email or with an authenticator app, and know what to do when someone loses their phone.
ReleasesFluentAuth 2.1: Google One-Tap, and a hardening pass
The 2.1 releases add Google One-Tap sign-in, a round of security hardening across the REST endpoints, timezone-correct stats, and a long list of fixes.
SecurityWhy we built FluentAuth
Most WordPress sites get broken into through the login page, and the plugins that guard it were slow, nagging or paid. So we built one that is none of those.
No articles in this category yet.
Ready to try it on your next build?
Install FluentAuth free, or read the getting-started guide first.