WordPress.org
Get WordPress

Plugin Directory

Changeset 2449165


Ignore:
Timestamp:
01/02/2021 03:22:35 PM (5 years ago)
Author:
guardgiant
Message:

Updating readme

Location:
guardgiant
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • guardgiant/tags/2.2.3/README.txt

    r2448416 r2449165  
    1313== Description ==
    1414
    15 = Security Features =
     15The only plugin with 100% brute force protection that doesn't lock out genuine users.
     16
     17= Brute Force Protection =
     18
     19This plugin implements a modern approach used by large websites such as Facebook, Google etc.
     20
     21When a genuine user makes a successful login to their account using their mobile phone, tablet, or computer GuardGiant starts treating their device as <mark>Trusted</mark>.
     22
     23* Failed login attempts from trusted devices are directed towards 'Lost Password' forms rather than being subject to account lockouts or additional counter measures.
     24
     25* Users receive an alert when anyone logs into their account from an unrecognized device or browser.
     26
     27= Limit Login Attempts =
     28
     29GuardGiant uses a range of strong counter-measures to limit failed login attempts from unrecognized devices. The default behaviour is:
     30
     31* After 3 failed login attempts from the same unrecognized device, a Google ReCaptcha field is added to the login page. ReCaptcha is a strong counter-measure that is very hard for an automated process to solve.
     32
     33* After 10 failed login attempts a temporary block of 2 minutes is applied to the device/IP address. No login attempts can be made during this time.
     34
     35* Each further failed login attempt increases the block time by another minute. This slows down attacks to the point where they quickly become unviable.
     36
     37All behavior is fully customizable to achieve the level of brute force protection that you require.
     38
     39= Login Activity Log =
     40
     41A fully featured activity log gives you visibility to all login attempts on your site.
     42
     43* Provides geographic location, device type, IP address and more for each login attempt.
     44* Filter login attempts by Trusted or Unrecognized devices.
     45* Search by IP address or username.
     46* Filter by successful or failed attempts.
     47* Easy to display successful logins from unrecognized devices that could indicate a hacked account.
     48
     49[View 3 things you should be tracking in your activity log.](https://www.guardgiant.com/wordpress-login-activity-3-things-you-should-be-tracking/ "View 3 things you should be tracking in your activity log.")
     50
     51This activity log can form an essential part of your brute force login protection plan. GDPR compliant.
     52
     53= Other Security Improvements =
     54
     55GuardGiant implements numerous other security improvements recommended by the Open Web Application Security Project® (OWASP) to keep your site safe:
     56
     57* Obfuscates login errors to stop user enumeration.
     58* Obfuscates password reset errors.
     59* Option to disable XMLRPC.
     60* Refuse guest access to certain sensitive API calls.
     61* And much, much more.
     62
     63Guardgiant is a modern, lightweight security plugin that is exceptionally easy to use no matter what your level of technical expertize.
     64
     65The default settings are highly optimized, designed to prevent brute force attacks whilst not disturbing genuine users from logging in. Advanced users can fully customize the behavior of this plugin to suit their own environment.
     66
     67
     68= Brute Force =
     69* **brute force**
    1670* **Brute force protection**
    1771* **Stop brute force attacks to hack passwords**
    … …  
    2478* **Brute force login protection**
    2579
    26 The only plugin with 100% brute force protection that doesn't lock out genuine users.
    27 
    28 = Brute Force Protection =
    29 
    30 This plugin implements an approach used by large websites such as Facebook, Google etc.
    31 
    32 When a genuine user makes a successful login to their account using their mobile phone, tablet, or computer GuardGiant starts treating their device as <mark>Trusted</mark>.
    33 
    34 * Failed login attempts from trusted devices are directed towards 'Lost Password' forms rather than being subject to account lockouts or additional counter measures.
    35 * Users receive an alert when anyone logs into their account from an unrecognized device or browser.
    36 
    37 = Limit Login Attempts =
    38 
    39 GuardGiant uses a range of strong counter-measures to limit failed login attempts from unrecognized devices. The default behaviour is:
    40 
    41 * After 3 failed login attempts from the same unrecognized device, a Google ReCaptcha field is added to the login page. ReCaptcha is a strong counter-measure that is very hard for an automated process to solve.
    42 * After 10 failed login attempts a temporary block of 2 minutes is applied to the device/IP address. No login attempts can be made during this time.
    43 * Each further failed login attempt increases the block time by another minute. This slows down attacks to the point where they quickly become unviable.
    44 
    45 All behavior is fully customizable to achieve the level of brute force protection that you require.
    46 
    47 = Login Activity Log =
    48 
    49 A fully featured activity log gives you visibility to all login attempts on your site.
    50 
    51 * Provides geographic location, device type, IP address and more for each login attempt.
    52 * Filter login attempts by Trusted or Unrecognized devices.
    53 * Search by IP address or username.
    54 * Filter by successful or failed attempts.
    55 * Easy to display successful logins from unrecognized devices that could indicate a hacked account.
    56 
    57 [View 3 things you should be tracking in your activity log.](https://www.guardgiant.com/wordpress-login-activity-3-things-you-should-be-tracking/ "View 3 things you should be tracking in your activity log.")
    58 
    59 This activity log can form an essential part of your brute force login protection plan. GDPR compliant.
    60 
    61 = Other Security Improvements =
    62 
    63 GuardGiant implements numerous other security improvements recommended by the Open Web Application Security Project® (OWASP) to keep your site safe:
    64 
    65 * Obfuscates login errors to stop user enumeration.
    66 * Obfuscates password reset errors.
    67 * Option to disable XMLRPC.
    68 * Refuse guest access to certain sensitive API calls.
    69 * And much, much more.
    70 
    71 Guardgiant is a modern, lightweight security plugin that is exceptionally easy to use no matter what your level of technical expertize.
    72 
    73 The default settings are highly optimized, designed to prevent brute force attacks whilst not disturbing genuine users from logging in. Advanced users can fully customize the behavior of this plugin to suit their own environment.
    74 
    75 
    7680== Installation ==
    7781

  • guardgiant/trunk/README.txt

    r2448416 r2449165  
    1313== Description ==
    1414
    15 = Security Features =
     15The only plugin with 100% brute force protection that doesn't lock out genuine users.
     16
     17= Brute Force Protection =
     18
     19This plugin implements a modern approach used by large websites such as Facebook, Google etc.
     20
     21When a genuine user makes a successful login to their account using their mobile phone, tablet, or computer GuardGiant starts treating their device as <mark>Trusted</mark>.
     22
     23* Failed login attempts from trusted devices are directed towards 'Lost Password' forms rather than being subject to account lockouts or additional counter measures.
     24
     25* Users receive an alert when anyone logs into their account from an unrecognized device or browser.
     26
     27= Limit Login Attempts =
     28
     29GuardGiant uses a range of strong counter-measures to limit failed login attempts from unrecognized devices. The default behaviour is:
     30
     31* After 3 failed login attempts from the same unrecognized device, a Google ReCaptcha field is added to the login page. ReCaptcha is a strong counter-measure that is very hard for an automated process to solve.
     32
     33* After 10 failed login attempts a temporary block of 2 minutes is applied to the device/IP address. No login attempts can be made during this time.
     34
     35* Each further failed login attempt increases the block time by another minute. This slows down attacks to the point where they quickly become unviable.
     36
     37All behavior is fully customizable to achieve the level of brute force protection that you require.
     38
     39= Login Activity Log =
     40
     41A fully featured activity log gives you visibility to all login attempts on your site.
     42
     43* Provides geographic location, device type, IP address and more for each login attempt.
     44* Filter login attempts by Trusted or Unrecognized devices.
     45* Search by IP address or username.
     46* Filter by successful or failed attempts.
     47* Easy to display successful logins from unrecognized devices that could indicate a hacked account.
     48
     49[View 3 things you should be tracking in your activity log.](https://www.guardgiant.com/wordpress-login-activity-3-things-you-should-be-tracking/ "View 3 things you should be tracking in your activity log.")
     50
     51This activity log can form an essential part of your brute force login protection plan. GDPR compliant.
     52
     53= Other Security Improvements =
     54
     55GuardGiant implements numerous other security improvements recommended by the Open Web Application Security Project® (OWASP) to keep your site safe:
     56
     57* Obfuscates login errors to stop user enumeration.
     58* Obfuscates password reset errors.
     59* Option to disable XMLRPC.
     60* Refuse guest access to certain sensitive API calls.
     61* And much, much more.
     62
     63Guardgiant is a modern, lightweight security plugin that is exceptionally easy to use no matter what your level of technical expertize.
     64
     65The default settings are highly optimized, designed to prevent brute force attacks whilst not disturbing genuine users from logging in. Advanced users can fully customize the behavior of this plugin to suit their own environment.
     66
     67
     68= Brute Force =
     69* **brute force**
    1670* **Brute force protection**
    1771* **Stop brute force attacks to hack passwords**
    … …  
    2478* **Brute force login protection**
    2579
    26 The only plugin with 100% brute force protection that doesn't lock out genuine users.
    27 
    28 = Brute Force Protection =
    29 
    30 This plugin implements an approach used by large websites such as Facebook, Google etc.
    31 
    32 When a genuine user makes a successful login to their account using their mobile phone, tablet, or computer GuardGiant starts treating their device as <mark>Trusted</mark>.
    33 
    34 * Failed login attempts from trusted devices are directed towards 'Lost Password' forms rather than being subject to account lockouts or additional counter measures.
    35 * Users receive an alert when anyone logs into their account from an unrecognized device or browser.
    36 
    37 = Limit Login Attempts =
    38 
    39 GuardGiant uses a range of strong counter-measures to limit failed login attempts from unrecognized devices. The default behaviour is:
    40 
    41 * After 3 failed login attempts from the same unrecognized device, a Google ReCaptcha field is added to the login page. ReCaptcha is a strong counter-measure that is very hard for an automated process to solve.
    42 * After 10 failed login attempts a temporary block of 2 minutes is applied to the device/IP address. No login attempts can be made during this time.
    43 * Each further failed login attempt increases the block time by another minute. This slows down attacks to the point where they quickly become unviable.
    44 
    45 All behavior is fully customizable to achieve the level of brute force protection that you require.
    46 
    47 = Login Activity Log =
    48 
    49 A fully featured activity log gives you visibility to all login attempts on your site.
    50 
    51 * Provides geographic location, device type, IP address and more for each login attempt.
    52 * Filter login attempts by Trusted or Unrecognized devices.
    53 * Search by IP address or username.
    54 * Filter by successful or failed attempts.
    55 * Easy to display successful logins from unrecognized devices that could indicate a hacked account.
    56 
    57 [View 3 things you should be tracking in your activity log.](https://www.guardgiant.com/wordpress-login-activity-3-things-you-should-be-tracking/ "View 3 things you should be tracking in your activity log.")
    58 
    59 This activity log can form an essential part of your brute force login protection plan. GDPR compliant.
    60 
    61 = Other Security Improvements =
    62 
    63 GuardGiant implements numerous other security improvements recommended by the Open Web Application Security Project® (OWASP) to keep your site safe:
    64 
    65 * Obfuscates login errors to stop user enumeration.
    66 * Obfuscates password reset errors.
    67 * Option to disable XMLRPC.
    68 * Refuse guest access to certain sensitive API calls.
    69 * And much, much more.
    70 
    71 Guardgiant is a modern, lightweight security plugin that is exceptionally easy to use no matter what your level of technical expertize.
    72 
    73 The default settings are highly optimized, designed to prevent brute force attacks whilst not disturbing genuine users from logging in. Advanced users can fully customize the behavior of this plugin to suit their own environment.
    74 
    75 
    7680== Installation ==
    7781
Note: See TracChangeset for help on using the changeset viewer.