Black Friday
Biggest sale of the year: 40% off FlexWoo Pro
Black Friday: 40% off Pro
Security & tools
In Free, more in Pro
Membership Site Security: 2FA, Login Lockouts & Audit Log
Lock out brute-force logins, control who can sign up, add two-factor login codes and keep an audit log of every important event – plus export, backup and system tools for peace of mind.
Brute-force protection
built in
Why it matters
Member Accounts are Worth Protecting
Paid accounts attract password guessing and account sharing. Stop both.
Login lockouts
Lock out IP addresses after repeated failed logins.
IP allow and block lists
Addresses, ranges or wildcards that are never or always refused.
Sign-up control
Automatic, e-mail verification or manual approval for new accounts.
E-mail rules
Block disposable addresses or allow only your domains.
Two-factor login codes
E-mail codes for extra login security (Pro).
Audit log
Every login, change and action recorded and exportable.
How it works
Sensible Defaults, Full Control
Login security
Brute-Force Protection That Does Not Lock Out Your Members
Failed logins are counted per IP address; a single account is only locked after many more failures, so a stranger cannot keep a member out just by typing their username.
- Max attempts, window and lockout time
- IP whitelist and blacklist
- Optional e-mail to the administrator
Sign-up restrictions
Decide Who Can Create an Account
Approve new accounts automatically, after e-mail verification or by hand. Block disposable e-mail domains, allow only listed domains and enforce strong passwords.
- Three approval modes
- Disposable e-mail blocking
- Strong password rules
Audit log
A Record of Everything Important
Logins, failed logins, membership changes, cron runs and admin actions are recorded with the actor, result and IP address, and can be filtered and exported.
- Filter by event, result and actor
- Export to CSV
- IP addresses can be anonymised
FAQ
Frequently Asked Questions
Can a stranger lock a member out of their account?
No. Lockouts are counted per IP address first; an account is only locked after several times as many failures.
Is two-factor authentication included?
Two-factor e-mail login codes are part of FlexWoo Memberships Pro.
What tools are included?
CSV import and export, settings backup and restore, database tools, scheduled tasks, cron health and a system status report.
Is the plugin GDPR friendly?
Data stays on your own site, and IP addresses in memberships and the audit log can be anonymised.
Keep exploring
Related features
E-mails & automation
Membership, account and renewal e-mails, grace periods and end-of-plan actions.
Payment gateways
Free Stripe, PayPal and Razorpay gateways, plus WooCommerce Subscriptions support.
Membership plans
Free, lifetime, fixed-length and subscription plans, each sold as a normal WooCommerce product.
Keep your membership site secure
Login protection, sign-up rules and the audit log are part of the free plugin.
