FluentAuth articles https://fluentauth.com/articles The lightweight security plugin for WordPress. Two-factor login, brute-force limits, one-click hardening, file-integrity scans, audit logs and post-hack recovery, plus social sign-in and magic links for your users. Free and open source, with focused login protection and optional sign-in features. en-us Audit WordPress administrator access before it becomes a problem https://fluentauth.com/articles/audit-wordpress-administrator-access https://fluentauth.com/articles/audit-wordpress-administrator-access Review account ownership, permissions and verification so old projects do not leave unnecessary access behind. Agency The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Make your WordPress login page feel like your site https://fluentauth.com/articles/customise-wordpress-login-page https://fluentauth.com/articles/customise-wordpress-login-page Use your logo, welcome copy and colours, then connect the login experience with redirects and branded emails. Tutorials The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT FluentAuth 3.0 is here https://fluentauth.com/articles/fluentauth-3-0 https://fluentauth.com/articles/fluentauth-3-0 Meet FluentAuth 3.0: passkeys, authenticator apps, a redesigned admin, expanded security tools and a new website. Releases The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Locked out of WordPress? Find the cause before changing settings https://fluentauth.com/articles/recover-wordpress-login-access https://fluentauth.com/articles/recover-wordpress-login-access Identify an attempt limit, an IP rule or a missing second factor, then recover access with the smallest necessary change. Tutorials The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT How to review WordPress file changes https://fluentauth.com/articles/review-wordpress-file-changes https://fluentauth.com/articles/review-wordpress-file-changes Understand modified, extra and unverified files before restoring anything. A practical workflow for FluentAuth monitoring. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT What your WordPress login log is telling you https://fluentauth.com/articles/understand-wordpress-login-activity https://fluentauth.com/articles/understand-wordpress-login-activity Turn failed attempts, blocked addresses and unfamiliar sign-ins into a practical investigation with FluentAuth's activity log. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT WordPress application passwords: keep, replace or revoke? https://fluentauth.com/articles/wordpress-application-passwords https://fluentauth.com/articles/wordpress-application-passwords Review the credentials behind integrations and understand what FluentAuth blocks or revokes before changing them. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Suspect a WordPress compromise? A practical response sequence https://fluentauth.com/articles/wordpress-compromise-response https://fluentauth.com/articles/wordpress-compromise-response Preserve useful evidence, contain account access and investigate files before deciding that recovery is complete. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Limit WordPress login attempts without frustrating your users https://fluentauth.com/articles/wordpress-login-attempt-limits https://fluentauth.com/articles/wordpress-login-attempt-limits Choose a sensible attempt limit, understand shared addresses and pair brute-force protection with stronger account verification. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT A practical WordPress login policy for a growing team https://fluentauth.com/articles/wordpress-login-security-for-teams https://fluentauth.com/articles/wordpress-login-security-for-teams Choose protection by role, help members sign in and give your team a clear way to review activity. A practical FluentAuth rollout for an existing site. Agency The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Set up passkey verification for WordPress https://fluentauth.com/articles/wordpress-passkeys-setup https://fluentauth.com/articles/wordpress-passkeys-setup Enable passkeys by role, register your device and keep a recovery route before relying on device verification. Tutorials The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT A convincing WordPress login page can still be the wrong one https://fluentauth.com/articles/wordpress-phishing-login-protection https://fluentauth.com/articles/wordpress-phishing-login-protection Help your team recognise suspicious sign-in requests and understand where passkeys, email and recovery fit. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT WordPress security alerts you can actually act on https://fluentauth.com/articles/wordpress-security-alerts https://fluentauth.com/articles/wordpress-security-alerts Choose who receives login alerts, use digests for routine review and build a response plan that keeps useful notifications from being ignored. Tutorials The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT A practical WordPress security checklist https://fluentauth.com/articles/wordpress-security-checklist https://fluentauth.com/articles/wordpress-security-checklist Review privileged accounts, login protections, exposed files and monitoring with FluentAuth. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Why signing everyone out matters after suspicious access https://fluentauth.com/articles/wordpress-session-recovery https://fluentauth.com/articles/wordpress-session-recovery Understand sessions, application credentials and password-reset requests before using FluentAuth recovery tools. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Should you disable XML-RPC on your WordPress site? https://fluentauth.com/articles/wordpress-xml-rpc-security https://fluentauth.com/articles/wordpress-xml-rpc-security Understand what XML-RPC does, what FluentAuth changes and how to test connected services before restricting it. Security The FluentAuth Team Mon, 14 Sep 2026 00:00:00 GMT Passwordless login for WordPress membership sites https://fluentauth.com/articles/passwordless-login-for-wordpress-membership-sites https://fluentauth.com/articles/passwordless-login-for-wordpress-membership-sites Password resets are where members give up. Give them a magic link or a Google button instead, and keep the password and the second factor for the people who run the site. Passwordless The FluentAuth Team Sat, 12 Sep 2026 00:00:00 GMT How to add two-factor authentication to WordPress admin https://fluentauth.com/articles/two-factor-authentication-for-wordpress-admin https://fluentauth.com/articles/two-factor-authentication-for-wordpress-admin A stolen password should not be enough. Turn on a second factor for administrators in five minutes, by email or with an authenticator app, and know what to do when someone loses their phone. Tutorials The FluentAuth Team Sat, 12 Sep 2026 00:00:00 GMT FluentAuth 2.1: Google One-Tap, and a hardening pass https://fluentauth.com/articles/fluentauth-2-1-google-one-tap https://fluentauth.com/articles/fluentauth-2-1-google-one-tap The 2.1 releases add Google One-Tap sign-in, a round of security hardening across the REST endpoints, timezone-correct stats, and a long list of fixes. Releases The FluentAuth Team Tue, 28 Apr 2026 00:00:00 GMT Why we built FluentAuth https://fluentauth.com/articles/why-we-built-fluentauth https://fluentauth.com/articles/why-we-built-fluentauth Most WordPress sites get broken into through the login page, and the plugins that guard it were slow, nagging or paid. So we built one that is none of those. Security Shahjahan Jewel Fri, 09 Dec 2022 00:00:00 GMT